Live › vulnerability › CVE-2026-111630
Go to dashboardThe LINGYUN.Abp.AIManagement module in abp-next-admin 10.2.0 through 10.6.0 does not check ownership of a chat conversation when given its ConversationId. An authenticated user with the Chat permission can read another user's AI chat messages and inject messages into that conversation.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running abp-next-admin 10.2.0 through 10.6.0 with the LINGYUN.Abp.AIManagement AI chat module enabled, where users hold the Chat permission. Deployments without that module or without AI chat users have a smaller exposure; the sources do not describe other configurations.
No product ranges from the sources yet.
10.6.0, as listed in the NVD record; the exact fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement module that allows authenticated users to access other users' AI chat conversations by supplying their ConversationId. Attackers holding the Chat permission can call ChatAppService.GetListAsync or SendMessageAsync with a victim's ConversationId GUID to read chat messages and inject messages into that conversation.
This page as .md · .json · in your agent: get_signal("CVE-2026-111630")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.