---
id: "CVE-2026-123881"
page: "https://infrastack.ai/live/CVE-2026-123881"
kind: "vulnerability"
aliases: ["CVE-2026-123881"]
title: "OpenBMB Internet of Agents: /fetch_chat_record returns chat records with no authentication, no fix yet"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "Internet of Agents (IoA)", "fixed": [], "affected": "main at commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a and earlier (rolling release, no versions)", "ecosystem": "github"}]
ecosystems: []
tags: ["ai-tooling", "internet-of-agents", "openbmb", "python", "self-hosted", "unauthenticated"]
not_affected_if: ["im_server-not-deployed", "not-network-reachable"]
published_at: "2026-11-07T08:16:26+00:00"
first_seen_at: "2026-11-07T08:46:22+00:00"
updated_at: "2026-11-07T08:48:59+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123881", "first_seen_at": "2026-11-07T08:46:22+00:00"}, {"source": "analyst", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123881", "first_seen_at": "2026-11-07T08:48:59+00:00", "cites": ["https://nvd.nist.gov/vuln/detail/CVE-2026-123881", "https://github.com/OpenBMB/IoA/issues/20", "https://github.com/OpenBMB/IoA/blob/main/im_server/app.py"]}]
exploit_sources: []
---

# OpenBMB Internet of Agents: /fetch_chat_record returns chat records with no authentication, no fix yet

Link for people: https://infrastack.ai/live/CVE-2026-123881 (this .md is for agents)

The IoA im_server /fetch_chat_record endpoint has no authentication. The public issue OpenBMB/IoA#20 (opened 2026-10-14) shows that sending comm_id=null returns the whole chat database, and the code on main matches that. The project has not responded and no fix exists.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- github:Internet of Agents (IoA) affected main at commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a and earlier (rolling release, no versions) fixed no fixed version listed

## How to check

- Check whether you run OpenBMB/IoA im_server (uvicorn on 0.0.0.0:7788) and whether port 7788 is reachable from untrusted networks.
- Test: POST /fetch_chat_record with {"comm_id": null} and no credentials. If it returns JSON chat records, you are exposed.
- Check your checkout: git log -1 (9d78e88 or any later commit without an auth check in fetch_chat_record is exposed; no fixed commit is known).

## Timeline

- 2026-11-07T08:46:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123881
- 2026-11-07T08:48:59+00:00 analyst https://nvd.nist.gov/vuln/detail/CVE-2026-123881 — Read issue #20 and main im_server/app.py: endpoint has no auth, comm_id None returns all records. Issue #20 doesn't say it's the same report as the CVE, but it names the same function and commit 9d78e88. Maintainers have not responded. No fix. Not verified: no vendor advisory.

## Documents

- [advisory] NVD CVE-2026-123881 https://nvd.nist.gov/vuln/detail/CVE-2026-123881
- [describes] OpenBMB/IoA #20: Non-members can inject messages and read all chat records https://github.com/OpenBMB/IoA/issues/20
- [describes] OpenBMB/IoA im_server/app.py (main) https://github.com/OpenBMB/IoA/blob/main/im_server/app.py

## From the sources

A vulnerability was found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This issue affects the function fetch_chat_record of the file im_server/app.py of the component Message Handler. The manipulation of the argument comm_id results in improper access controls. The attack may be performed from remote. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_