CVE-2026-123881: OpenBMB Internet of Agents Message app.py fetch_chat_record access control

Published Nov 7, 2026

Updated

A vulnerability was found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This issue affects the function fetchchatrecord of the file imserver/app.py of the component Message Handler. The manipulation of the argument commid results in improper access controls. The attack may be performed from remote. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Event History

Nov 7, 2026

CVE Published

via MITRE·07:15 AM

Data Sourced

via MITRE·07:15 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker needs remote access to the Message Handler endpoint that invokes fetch_chat_record and must be able to manipulate the comm_id argument. No authentication requirement or other prerequisite is specified in the available information.

Which deployments should be treated as exposed?

Deployments using OpenBMB Internet of Agents at or before commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a should be treated as potentially affected if the Message Handler is remotely reachable. The available information does not state whether the vulnerable endpoint is exposed in a default configuration.

How can I check for potential exposure?

Identify the deployed source revision and determine whether it is at or before commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. Review im_server/app.py for the fetch_chat_record function and assess whether callers can supply or alter comm_id to retrieve chat records outside their authorization scope.

What should be done if a fix is not available?

Restrict remote access to the Message Handler and limit access to trusted users or networks until a remediation is available. Because public exploit information exists, prioritize review of access controls around comm_id and monitor requests to fetch_chat_record for unexpected or cross-user record access.

CVE-2026-123881: OpenBMB Internet of Agents Message app.py fetch_chat_record access control

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which deployments should be treated as exposed?

How can I check for potential exposure?

What should be done if a fix is not available?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which deployments should be treated as exposed?

How can I check for potential exposure?

What should be done if a fix is not available?