A vulnerability (CVE-2026-123881) exists in OpenBMB Internet of Agents, affecting the Message Handler component's `fetch_chat_record` function in `app.py`. The issue arises from improper access control due to manipulation of the `commid` argument, allowing remote attacks. The vulnerability is exploitable in versions up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This matters to developers and operators as it may enable unauthorized access to sensitive information, highlighting the need for prompt patching and secure coding practices.