A flaw in the ConnectionManager.connect function of OpenBMB Internet of Agents allows an attacker to supply a crafted agent_name argument that bypasses authentication checks. The missing authentication enables the attacker to establish a WebSocket connection without proving ownership or credentials, potentially granting unauthorized control or data access. This weakness is a classic authentication bypass (CWE-287) coupled with a missing authorization check (CWE-306).

The vulnerability affects all releases of OpenBMB Internet of Agents up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. No specific product versions are listed because the project uses rolling releases. The impacted component is the WebSocket Connection Manager located in app.py.

The CVSS score of 6.9 indicates moderate severity. The EPSS score is not available, and the flaw is not currently listed in CISA KEV. The attack can be launched remotely by manipulating the agent_name parameter in a WebSocket connection request; the exploit code has been publicly released, so the likelihood of exploitation is non‑negligible. The impact ranges from unauthorized access to the underlying system to potential data exfiltration or disruption, depending on the resources an attacker can access through the open connection.