{"id":"CVE-2026-123032","kind":"vulnerability","aliases":["CVE-2026-123032"],"related":[],"title":"Internet of Agents: WebSocket connection manager lets remote users skip authentication","description":"A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function ConnectionManager.connect of the file im_server/app.py of the component WebSocket Connection Manager. The manipulation of the argument agent_name results in missing authentication. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.","summary":"OpenBMB Internet of Agents has a flaw in its WebSocket connection manager, where manipulating the agent_name argument bypasses authentication. A remote attacker can connect to the agent server without valid credentials, and a public exploit has been released.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Internet of Agents (IoA)","fixed":[],"affected":"all commits up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a (rolling release, no versions)","ecosystem":"vendor"}],"ecosystems":[],"tags":["ai-agents","ai-tooling","internet-of-agents","openbmb","websocket"],"not_affected_if":["im-server-not-exposed","not-deployed","private-network"],"how_to_check":"- Confirm whether you run OpenBMB Internet of Agents (OpenBMB/IoA, ioa-server image or source) and which commit it is built from; commits up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a are listed as affected.\n- Check whether the im_server WebSocket service (ConnectionManager.connect in im_server/app.py) is reachable from outside your network.\n- Workaround (not from the vendor): keep the IoA server on a private network or behind an authenticating proxy/firewall until the project responds.","fix":null,"status":"open","published_at":"2026-11-05T15:17:20+00:00","first_seen_at":"2026-11-05T15:39:21+00:00","triaged_at":"2026-11-05T15:40:45+00:00","updated_at":"2026-11-05T15:42:25+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-11-05T15:40:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Internet of Agents: WebSocket connection manager lets remote users skip authentication","impact":"medium","summary":"OpenBMB Internet of Agents has a flaw in its WebSocket connection manager, where manipulating the agent_name argument bypasses authentication. A remote attacker can connect to the agent server without valid credentials, and a public exploit has been released.","audience":"developers","category":"ai-tooling","nicknames":[],"who_cares":["internet-of-agents","openbmb","websocket","ai-agents"],"confidence":0.7,"fix_status":"none","needs_auth":"no","worst_case":"Remote attacker connects to agent server without credentials","analyst_note":"Check the NVD entry and the project repository for any fix or response; confirm what the connected WebSocket session can access.","how_to_check":"- Confirm whether you run OpenBMB Internet of Agents and which commit it is built from (up to `9d78e88e47160eb42ee1ee8538c05e1c2c47877a` is affected)\n- Check whether the im_server WebSocket service in `im_server/app.py` is reachable from outside your network","plain_action":"","needs_analyst":true,"not_affected_if":["not-deployed","im-server-not-exposed"],"who_is_affected":"Teams running OpenBMB Internet of Agents with the im_server WebSocket service reachable from a network. The sources say the product uses rolling releases, so no affected or fixed version range is published. The project was informed through an issue report and has not responded, so no patch is stated.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000723,"input_tokens":4356,"output_tokens":575,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the NVD entry and the project repository for any fix or response; confirm what the connected WebSocket session can access.","search":"'-123032':14A,17A '-2026':13A,16A '9d78e88e47160eb42ee1ee8538c05e1c2c47877a':86C 'affect':88C,152C 'agent':3A,24B,31B,37B,49B,61B,83C,108C 'agents':20A 'ai':23B,26B 'ai-ag':22B 'ai-tool':25B 'approach':140C 'argument':51B,107C 'attack':56B,120C,135C 'authent':11A,53B,113C 'avail':158C 'bypass':52B 'compon':99C 'connect':5A,44B,58B,101C 'connectionmanager.connect':91C 'contini':146C 'credenti':65B 'cve':12A,15A 'deliveri':147C 'detail':150C 'discov':78C 'earli':166C 'exploit':69B,123C 'file':94C 'flaw':40B,75C 'function':90C 'im':95C 'inform':162C 'internet':1A,18A,29B,35B,81C 'internet-of-ag':28B 'ioa':21A 'issu':169C 'launch':118C 'let':7A 'manag':6A,45B,102C 'manipul':47B,104C 'may':131C 'miss':112C 'name':50B,109C 'of':19A 'openbmb':32B,34B,80C 'possibl':116C 'problem':165C 'product':137C 'project':160C 'provid':145C 'public':68B,129C 'releas':72B,126C,143C,155C 'remot':8A,55B,121C 'report':170C 'respond':174C 'result':110C 'roll':142C 'secur':74C 'server':62B 'server/app.py':96C 'skip':10A 'take':138C 'therefor':148C 'tool':27B 'updat':154C 'use':133C 'user':9A 'valid':64B 'version':149C 'websocket':4A,33B,43B,100C 'without':63B 'yet':175C","nicknames":[],"mitigations":[],"who_affected":"Teams running the OpenBMB Internet of Agents server (im_server) where its WebSocket endpoint can be reached by untrusted users. Per NVD, changing the agent_name argument skips authentication, so a remote client can connect without credentials. Systems where the server is only on a private, trusted network can skip this for now. What a connected session can read or do is not described in the sources.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":["internetofagentsioa","ofagentsioa"],"ptokens":["agents","internet","ioa","of"],"labels":["aiagents","aitooling","high","internetofagents","openbmb","websocket"],"campaign_type":null,"first_public_at":"2026-11-05T15:17:20+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123032","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123032","severity":null,"published_at":"2026-11-05T15:17:20+00:00","modified_at":"2026-11-05T15:17:21+00:00","first_seen_at":"2026-11-05T15:39:21+00:00","fetched_at":"2026-11-05T15:39:21+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-123032:1791","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123032","severity":null,"published_at":"2026-11-05T15:42:25+00:00","modified_at":"2026-11-05T15:42:25+00:00","first_seen_at":"2026-11-05T15:42:25+00:00","fetched_at":"2026-11-05T15:42:25+00:00","note":"NVD (CNA VulDB) text only; no project advisory, fix or issue text found. NVD says the project was told via an issue and has not responded; repo has no SECURITY.md. Public exploit claimed by NVD but no link found. X not checked. Not verified: no vendor page.","cites":["https://nvd.nist.gov/vuln/detail/CVE-2026-123032","https://github.com/OpenBMB/IoA"]}],"documents":[{"id":77391,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123032","title":"NVD CVE-2026-123032","kind":"advisory","source":"analyst","publisher":null,"text":"A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. ConnectionManager.connect in im_server/app.py (WebSocket Connection Manager); manipulating agent_name results in missing authentication. Remote attack possible. Exploit released publicly. Rolling releases, so no version details. The project was informed early through an issue report but has not responded yet.","published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":77392,"url":"https://github.com/OpenBMB/IoA","title":"OpenBMB/IoA repository","kind":"other","source":"analyst","publisher":null,"text":"Repository README: IoA server (im_server) and client Docker images; no SECURITY.md; 16 open issues; default branch main.","published_at":null,"relation":"describes","confidence":null,"note":null}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}