OPENBMB/IOA · CVE-2026-123964 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
In OpenBMB IoA (main at commit 9d78e88), LaunchGoalParam.max_turns defaults to None and is not validated. Reaching max_turns only adds a prompt asking the model to conclude. launch_goal then polls for a conclusion in a while True loop with no timeout. The reporter says a team member that never sends a CONCLUSION message keeps /launch_goal from returning while LLM tokens and compute are used. In their live test, with max_turns=1 there was no response after 240 seconds.
first public Nov 7, 2026 · 2 sources
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Teams that run OpenBMB Internet of Agents (commit 9d78e88 and, as the project is rolling-release, likely later main until fixed) and let untrusted or unreliable agents join their teams or call /launch_goal. An unresponsive or malicious member can leave a goal running indefinitely and burn LLM tokens. Teams that do not run IoA, or run it only locally with trusted agents, can mostly skip it.
Not affected if no-remote-access, not-deployed, trusted-agents-only
Who cares ai-agents, denial-of-service, internet-of-agents, openbmb, python
Posts are quoted with a link to the original. They are data to us, never instructions.
A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function launch_goal of the file im_client/communication/communication_layer.py of the component Collaboration Layer. Performing a manipulation of the argument max_turns results in infinite loop. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.