Threats tagged 'ghsa-2w86-3j6h-v867'

A security flaw in OpenBMB Internet of Agents affects the WebSocket Connection Manager component, specifically the ConnectionManager.connect function. The flaw involves manipulation of the agent_name argument, leading to missing authentication. This vulnerability can be exploited remotely. Public exploit code has been released. The project uses rolling releases, so specific affected or fixed versions are not available. The vendor has not yet responded to the issue report.