abp-next-admin versions 10.2.0 through 10.6.0 include an insecure direct object reference flaw in the LINGYUN.Abp.AIManagement module, allowing authenticated users who possess the Chat permission to supply another user’s ConversationId to retrieve or send messages. The vulnerability permits disclosure of private conversation content and unauthorized message injection, affecting confidentiality and integrity of data as defined by CWE‑639.

The issue applies to colinin abp-next-admin, specifically the AIManagement module, impacting all releases from 10.2.0 up to and including 10.6.0. Users running any of these versions are susceptible if they hold the Chat permission.

With a CVSS score of 5.3 the risk is moderate, and no exploit probability (EPSS) is available, so the likelihood of active exploitation is uncertain. The flaw requires authentication and specific permissions, meaning attackers cannot exploit it anonymously; they need to be a legitimate user with Chat rights. The vulnerability is not listed in CISA’s KEV catalog.