---
id: "CVE-2026-123964"
page: "https://infrastack.ai/live/CVE-2026-123964"
kind: "vulnerability"
aliases: ["CVE-2026-123964"]
title: "Internet of Agents: launch_goal has no turn cap or timeout, so a silent team member hangs a task forever"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "OpenBMB/IoA", "fixed": [], "affected": "<= 9d78e88e47160eb42ee1ee8538c05e1c2c47877a (rolling release, no versions)", "ecosystem": "github"}]
ecosystems: []
tags: ["ai-agents", "ai-tooling", "denial-of-service", "internet-of-agents", "openbmb", "python"]
not_affected_if: ["no-remote-access", "not-deployed", "trusted-agents-only"]
published_at: "2026-11-07T13:16:38+00:00"
first_seen_at: "2026-11-07T13:47:26+00:00"
updated_at: "2026-11-07T13:50:41+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123964", "first_seen_at": "2026-11-07T13:47:26+00:00"}, {"source": "analyst", "url": "https://github.com/OpenBMB/IoA/issues/22", "first_seen_at": "2026-11-07T13:50:41+00:00", "cites": ["https://github.com/OpenBMB/IoA/issues/22", "https://vuldb.com/submit/1033798"]}]
exploit_sources: []
---

# Internet of Agents: launch_goal has no turn cap or timeout, so a silent team member hangs a task forever

Link for people: https://infrastack.ai/live/CVE-2026-123964 (this .md is for agents)

In OpenBMB IoA (main at commit 9d78e88), LaunchGoalParam.max_turns defaults to None and is not validated. Reaching max_turns only adds a prompt asking the model to conclude. launch_goal then polls for a conclusion in a while True loop with no timeout. The reporter says a team member that never sends a CONCLUSION message keeps /launch_goal from returning while LLM tokens and compute are used. In their live test, with max_turns=1 there was no response after 240 seconds.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- github:OpenBMB/IoA affected <= 9d78e88e47160eb42ee1ee8538c05e1c2c47877a (rolling release, no versions) fixed no fixed version listed

## How to check

- Check whether you run OpenBMB/IoA at or before commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a (git rev-parse HEAD)
- In im_client/communication/communication_layer.py, look for the while True conclusion poll with asyncio.sleep(5) in launch_goal and no timeout; max_turns defaults to None in common/types/communication.py
- Check whether the /launch_goal port (5050 in the docs) and agent registration are reachable by anyone you do not trust

## Fix

No fix or patched commit as of 2026-11-07: issue #22 is open with no maintainer reply. Workaround: put your own timeout around /launch_goal calls and only let trusted agents join teams.

## Timeline

- 2026-11-07T13:47:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123964
- 2026-11-07T13:50:41+00:00 analyst https://github.com/OpenBMB/IoA/issues/22 — Primary source is the researcher's issue OpenBMB/IoA#22 (open, no maintainer response) and VulDB submit. Not a crafted-argument bug as titled: unbounded default max_turns plus a no-timeout poll; trigger is a silent team member. Retitled. No fix found; no PoC beyond the issue steps; nothing verified because no vendor/maintainer page.

## Documents

- [advisory] OpenBMB/IoA #22: No hard cap on collaboration turns or conclusion polling https://github.com/OpenBMB/IoA/issues/22
- [describes] VulDB submit #1033798 (Excessive Iteration, IoA 9d78e88) https://vuldb.com/submit/1033798

## From the sources

A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function launch_goal of the file im_client/communication/communication_layer.py of the component Collaboration Layer. Performing a manipulation of the argument max_turns results in infinite loop. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_