{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/internet-of-agents-up-to-commit-9d78e88e47160eb42ee1ee8538c05e1c2c47877a/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:openbmb:internet_of_agents:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-123791"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Internet of Agents (up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["OpenBMB"],"content_html":"\u003cp\u003eA vulnerability exists in the Agent Registry component of OpenBMB Internet of Agents (up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a). The vulnerability resides in the _primary_field_query function of common/utils/milvus_utils.py. Manipulation of the key argument results in improper neutralization of special elements in data query logic. The attack may be launched remotely, and the exploit is public. The project has not yet responded to an issue report regarding this vulnerability.\u003c/p\u003e\n","date_modified":"2026-11-07T01:38:04Z","date_published":"2026-11-07T01:38:04Z","id":"https://feed.craftedsignal.io/briefs/2026-11-openbmb-internet-of-agents-injection/","summary":"A vulnerability in the Agent Registry component of OpenBMB Internet of Agents allows remote attackers to manipulate data query logic via the key argument in the _primary_field_query function.","title":"OpenBMB Internet of Agents: Improper neutralization in Agent Registry (CVE-2026-123791)","url":"https://feed.craftedsignal.io/briefs/2026-11-openbmb-internet-of-agents-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Internet of Agents (Up to Commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a)","version":"https://jsonfeed.org/version/1.1"}