Internet of Agents (Up to Commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/internet-of-agents-up-to-commit-9d78e88e47160eb42ee1ee8538c05e1c2c47877a/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 01:38:04 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgOpenBMB Internet of Agents: Improper neutralization in Agent Registry (CVE-2026-123791)https://feed.craftedsignal.io/briefs/2026-11-openbmb-internet-of-agents-injection/Sat, 07 Nov 2026 01:38:04 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-openbmb-internet-of-agents-injection/A vulnerability in the Agent Registry component of OpenBMB Internet of Agents allows remote attackers to manipulate data query logic via the key argument in the _primary_field_query function.<p>A vulnerability exists in the Agent Registry component of OpenBMB Internet of Agents (up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a). The vulnerability resides in the _primary_field_query function of common/utils/milvus_utils.py. Manipulation of the key argument results in improper neutralization of special elements in data query logic. The attack may be launched remotely, and the exploit is public. The project has not yet responded to an issue report regarding this vulnerability.</p> highadvisory