MEDIUM
colinin
CVE published 2026-10-16
CVE-2026-111630
CVE-2026-111630 debrief: abp-next-admin 10.2.0 through 10.6.0 IDOR in AIManagement Chat Conversations allows authenticated users to access other users' AI chat conversations, potentially leading to unauthorized information disclosure and injection of malicious messages. The vulnerability exists in the LINGYUN.Abp.AIManagement module, and attackers holding the Chat permission can call ChatAppService.GetLis [truncated]