CVE-2026-123964: OpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loop

A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function launchgoal of the file imclient/communication/communicationlayer.py of the component Collaboration Layer. Performing a manipulation of the argument maxturns results in infinite loop. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.