A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function launch_goal of the file im_client/communication/communication_layer.py of the component Collaboration Layer. Performing a manipulation of the argument max_turns results in infinite loop. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
| CVE | CVE-2026-123964 |
|---|---|
| Severidad | MEDIUM |
| CVSS | 4.3 / 10 |
| EPSS | 0.5% en 30 días (percentil 39) |
| CWE | CWE-404, CWE-835 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |