The vulnerability allows an attacker to manipulate the comm_id argument in the fetch_chat_record function of the Message Handler, which results in improper access controls. This flaw can enable an attacker to retrieve chat records that belong to other users, thereby compromising confidentiality of user data. The weakness is a classic example of authorization bypass and is classified under CWE-266 and CWE-284.

OpenBMB Internet of Agents is affected by this flaw up to the code revision 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. The specific component impacted is the fetch_chat_record endpoint within im_server/app.py. Any deployment of this version or earlier without the fix is vulnerable.

The CVSS score of 6.9 indicates a medium level of severity. No EPSS score is available, so the exploitation likelihood is unclear from the data, but the vulnerability is reported as publicly available and exploitable from a remote location. The flaw is not listed in CISA's KEV catalog, which suggests it has not yet been widely observed in the wild. Nevertheless, the ability to read unauthorized data makes this a significant risk for systems exposing this endpoint.