Abp Next Admin
Monthly
Authenticated users of abp-next-admin 10.2.0 through 10.6.0 who hold the Chat permission can read, and inject messages into, other users' AI chat conversations by supplying a victim's ConversationId GUID to ChatAppService.GetListAsync or SendMessageAsync in the LINGYUN.Abp.AIManagement module. The flaw is a moderate-severity authorization error (CWE-639, IDOR) rather than an unauthenticated remote compromise: exploitation requires a valid account holding the Chat permission (PR:L per the assessed vector) plus knowledge of the target's GUID, which is not readily guessable, so opportunistic abuse is limited. There is confirmed actively exploited status absent (CISA KEV), no public exploit identified at time of analysis, and exploitation is constrained by the out-of-band acquisition of the ConversationId; the advisory and vendor source code are publicly referenced, but that is technical documentation, not weaponized exploit code.
Authenticated users of abp-next-admin 10.2.0 through 10.6.0 who hold the Chat permission can read, and inject messages into, other users' AI chat conversations by supplying a victim's ConversationId GUID to ChatAppService.GetListAsync or SendMessageAsync in the LINGYUN.Abp.AIManagement module. The flaw is a moderate-severity authorization error (CWE-639, IDOR) rather than an unauthenticated remote compromise: exploitation requires a valid account holding the Chat permission (PR:L per the assessed vector) plus knowledge of the target's GUID, which is not readily guessable, so opportunistic abuse is limited. There is confirmed actively exploited status absent (CISA KEV), no public exploit identified at time of analysis, and exploitation is constrained by the out-of-band acquisition of the ConversationId; the advisory and vendor source code are publicly referenced, but that is technical documentation, not weaponized exploit code.