Description
A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function launch_goal of the file im_client/communication/communication_layer.py of the component Collaboration Layer. Performing a manipulation of the argument max_turns results in infinite loop. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenBMB | Internet of Agents | 9d78e88e47160eb42ee1ee8538c05e1c2c47877a | — |
References
- VDB-432034 | OpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loop vdb-entry technical-description
- VDB-432034 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-123964 | CVE Analysis and Report third-party-advisory
- Submit #1033798 | OpenBMB Internet of Agents(IoA) 9d78e88 Excessive Iteration third-party-advisory
- https://github.com/OpenBMB/IoA/issues/22 exploit issue-tracking