CVE-2026-111630Published
abp-next-admin 10.2.0 through 10.6.0 IDOR in AIManagement Chat Conversations
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111630 · Microsoft / collected KEV context
cve-program · CVE-2026-111630
- https://hackmd.io/@hieuPenguinnn/abp-next-admin-aimanagement-chat-idor
- https://github.com/colinin/abp-next-admin/blob/10.6.0/aspnet-core/modules/ai/LINGYUN.Abp.AIManagement.Application/LINGYUN/Abp/AIManagement/Chats/ChatAppService.cs#L27-L52
- https://github.com/colinin/abp-next-admin/blob/10.6.0/aspnet-core/modules/ai/LINGYUN.Abp.AIManagement.Domain/LINGYUN/Abp/AIManagement/Chats/ConversationStore.cs#L49-L66
- https://www.vulncheck.com/advisories/abp-next-admin-10.2.0-through-10.6.0-idor-in-aimanagement-chat-conversations
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.