CVE-2026-123964Medium· 4.3▾ SunlitA vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function launch_goal of the file im_client/communication/communication_layer.py of the component Collaboration La…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function launch_goal of the file im_client/communication/communication_layer.py of the component Collaboration Layer. Performing a manipulation of the argument max_turns results in infinite loop. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
internet_of_agents 9d78e88e47160eb42ee1ee8538c05e1c2c47877aRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-123963High· 7.3OpenBMB Internet of Agents Agent Registry app.py register missing authentication
CVE-2026-123881High· 7.3OpenBMB Internet of Agents Message app.py fetch_chat_record access control
CVE-2026-123791High· 7.3OpenBMB Internet of Agents Agent Registry milvus_utils.py _primary_field_query data query logic injection
CVE-2026-123675High· 8.3OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection
CVE-2026-123032High· 7.3OpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authentication
CVE-2026-121261Medium· 4.3phpMyAdmin ShapeFile SHP File loadFromFile infinite loop