CVE-2026-123032

A security flaw in OpenBMB Internet of Agents (up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a) allows for missing authentication in the WebSocket Connection Manager component. Specifically, manipulating the agent_name argument in the ConnectionManager.connect function of im_server/app.py c...

CVE-2026-123032 OpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authentication

A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function ConnectionManager.connect of the file imserver/app.py of the component WebSocket Connection Manager. The manipulation of the argument agentname results in...