OpenBMB Internet of Agents: Code injection vulnerability (CVE-2026-123675)
OpenBMB Internet of Agents is vulnerable to remote code injection via the Code Executor Tool due to improper input sanitization in the execute_code function.
CVE search metadata
CVE search record: CVE-2026-123675. Severity: high. CVSS: 8.3. KEV: no. Product: Internet of Agents (<= 9d78e88e47160eb42ee1ee8538c05e1c2c47877a). Brief: OpenBMB Internet of Agents: Code injection vulnerability (CVE-2026-123675). Brief link: https://feed.craftedsignal.io/briefs/2026-11-code-injection/
Triage facts
Revision 1- Applicability
- Internet of Agents (<= 9d78e88e47160eb42ee1ee8538c05e1c2c47877a)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Nov 6, 17:26 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Likely
A code injection vulnerability exists in the OpenBMB Internet of Agents project, specifically within the execute_code function of the im_client/agents/tools/code_executor.py file. Remote attackers can trigger code execution by manipulating the filename or lang arguments processed by the Code Executor Tool. As of this report, the project maintainers have not responded to the initial issue disclosure, and no patched version is available. Public exploit code is currently available.
Impact
Successful exploitation allows for arbitrary remote code execution on the system hosting the Internet of Agents component.
Recommendation
- Perform an inventory of all instances of OpenBMB Internet of Agents in your environment.
- Restrict network access to the management and agent interfaces of Internet of Agents to trusted internal networks to mitigate remote exploitation.
- Monitor logs for unusual execution patterns or child processes spawned by the Internet of Agents service until a patch is released.
Immediate actions
Restrict network access to affected Internet of Agents instances.
Threat Hunt
Monitor for suspicious child processes (e.g., /bin/sh, python, bash) originating from the service account running the Internet of Agents.
Data: Process creation logs (Sysmon Event ID 1 or EDR process telemetry)
Mitigations
Isolate vulnerable nodes from public network access.
CVE-2026-123675
Gaps
- No vendor patch available at this time.