Is CVE-2026-123881 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-123881 being exploited in the wild.

How severe is CVE-2026-123881?

High severity, with a CVSS score of 7.3, published 7 November 2026.

Which products and versions are affected?

OpenBMB Internet of Agents up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.

How is CVE-2026-123881 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-123881?

Check whether you run OpenBMB Internet of Agents at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-123881: OpenBMB Internet of Agents improper access control in message handler

CVE-2026-123881 · Severity: high · CVSS 7.3 · Published 2026-11-07

OpenBMB Internet of Agents is a framework for collaborative AI systems. An unauthenticated attacker can inject unlimited messages into any chat session and read all chat records without credentials, enabling message spoofing, conversation flooding, and disclosure of sensitive team discussions and AI task outputs.

Technologies: OpenBMB Internet of Agents. Vendors: OpenBMB.

Quick answers

Is CVE-2026-123881 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-123881 being exploited in the wild.
How severe is CVE-2026-123881?: High severity, with a CVSS score of 7.3, published 7 November 2026.
Which products and versions are affected?: OpenBMB Internet of Agents up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
Is there a fix for CVE-2026-123881?: No fixed version is recorded yet. Restrict WebSocket connections to authenticated and registered members only; verify sender identity matches connection identity before processing messages; implement per-session and per-connection rate limits and message size caps; require authentication, specific comm_id, and pagination for /fetch_chat_record calls. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-123881 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-123881?: Check whether you run OpenBMB Internet of Agents at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Restrict WebSocket connections to authenticated and registered members only; verify sender identity matches connection identity before processing messages; implement per-session and per-connection rate limits and message size caps; require authentication, specific comm_id, and pagination for /fetch_chat_record calls.

Technical details

The Message Handler component in im_server/app.py fails to authenticate WebSocket connections or verify sender membership before accepting messages; any unauthenticated client can send messages to any session (comm_id) without rate or size limits. Additionally, the /fetch_chat_record endpoint accepts comm_id=None and returns the entire chat database without authentication or pagination, disclosing all recorded conversations and AI outputs.

Affected products

OpenBMB Internet of Agents up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a

Timeline

2026-10-14: disclosed: Security issue reported on GitHub
2026-11-07: advisory: CVE published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.