| 제목 | OpenBMB Internet of Agents(IoA) 9d78e88 Improper Neutralization of Special Elements in Data Query Logic |
|---|
| 설명 | A vulnerability was found in OpenBMB Internet of Agents up to commit 9d78e88. This vulnerability affects the function _primary_field_query of the file common/utils/milvus_utils.py of the component Agent Registry. The manipulation of the argument key leads to improper neutralization of special elements in data query logic. It is possible to launch the attack remotely.
Details: agent names arrive directly from HTTP input and are concatenated into Milvus query expressions without escaping: expr = f'{primary_field.name} == "{key}"'. A double quote terminates the string literal and injects additional query logic. Verified with the name cve-inj" or key == "AutoGPT: the /query_assistant endpoint returns the AutoGPT record instead of the queried name, and the /register existence check becomes always-true so the registration is silently skipped (HTTP 200 but nothing stored). The same pattern applies to every name-keyed query and delete path.
Impact: manipulation of query logic, disclosure of any registered agent's description and type, and bypass of the registration existence check (silently skipped registration, or duplicate writes with an always-false expression).
Suggested fix: validate the name character set at the API layer (e.g. ^[A-Za-z0-9 _-]{1,64}$); escape double quotes and backslashes or use a parameterized query interface; explicitly verify existence-check and write results instead of swallowing failures. |
|---|
| 원천 | ⚠️ https://github.com/OpenBMB/IoA/issues/19 |
|---|
| 사용자 | Evo1ution (UID 101872) |
|---|
| 제출 | 2026. 10. 14. PM 03:16 (23 날 ago) |
|---|
| 모더레이션 | 2026. 11. 06. PM 03:47 (23 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 431935 [OpenBMB Internet of Agents 까지 9d78e88e47160eb42ee1ee8538c05e1c2c47877a Agent Registry milvus_utils.py _primary_field_query key 원격 코드 실행] |
|---|
| 포인트들 | 20 |
|---|