Is CVE-2026-123964 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-123964 being exploited in the wild.

How severe is CVE-2026-123964?

Medium severity, with a CVSS score of 4.3, published 7 November 2026.

Which products and versions are affected?

OpenBMB Internet of Agents up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.

How is CVE-2026-123964 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-123964?

Check whether you run OpenBMB Internet of Agents at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-123964: OpenBMB Internet of Agents denial of service via unlimited collaboration turns

CVE-2026-123964 · Severity: medium · CVSS 4.3 · Published 2026-11-07

OpenBMB Internet of Agents is a framework for coordinating multiple AI agents in collaborative tasks. An attacker can cause unresponsive team members to hang group discussions indefinitely, exhausting compute resources and LLM tokens without bound. This enables a sustained denial of service that affects all participants in the affected session.

Technologies: OpenBMB Internet of Agents. Vendors: OpenBMB.

Quick answers

Is CVE-2026-123964 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-123964 being exploited in the wild.
How severe is CVE-2026-123964?: Medium severity, with a CVSS score of 4.3, published 7 November 2026.
Which products and versions are affected?: OpenBMB Internet of Agents up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
Is there a fix for CVE-2026-123964?: No fixed version is recorded yet. Implement server-side enforcement of turn limits with hard cutoff and automatic conclusion broadcast when max_turns is reached. Add a timeout to the conclusion polling loop with a fallback conclusion mechanism, and validate max_turns to a bounded range rather than allowing unlimited values.</anigation> <parameter name="timeline">[{"kind":"disclosed","at":"2026-10-14","note":"Issue reported via GitHub"},{"kind":"advisory","at":"2026-11-07"}] If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-123964 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-123964?: Check whether you run OpenBMB Internet of Agents at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Implement server-side enforcement of turn limits with hard cutoff and automatic conclusion broadcast when max_turns is reached. Add a timeout to the conclusion polling loop with a fallback conclusion mechanism, and validate max_turns to a bounded range rather than allowing unlimited values.</anigation> <parameter name="timeline">[{"kind":"disclosed","at":"2026-10-14","note":"Issue reported via GitHub"},{"kind":"advisory","at":"2026-11-07"}]

Technical details

The vulnerability stems from missing enforcement of turn limits and timeouts in the launch_goal function within the Collaboration Layer. The max_turns parameter defaults to unlimited and is never validated; when reached, only a prompt is appended instead of enforcing a hard cutoff. The conclusion polling loop contains no timeout and blocks indefinitely while waiting for a conclusion message (while True with sleep), allowing a silent or unresponsive member to cause resource exhaustion. An attacker can deliberately trigger this by joining a collaborative session and refusing to send a conclusion message.

Affected products

OpenBMB Internet of Agents up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.