| 제목 | OpenBMB Internet of Agents(IoA) 9d78e88 Improper Input Validation |
|---|
| 설명 | A vulnerability was found in OpenBMB Internet of Agents up to commit 9d78e88. This vulnerability affects the function register of the file im_server/app.py of the component Agent Registry. The manipulation of the argument desc/name leads to improper input validation. It is possible to launch the attack remotely.
Details: the /register endpoint has no rate limiting, no quotas, and no length or content validation on the name and desc fields. An attacker can register an unlimited number of agents with keyword-stuffed descriptions so that /retrieve_assistant reliably recalls them. Each registration triggers one embedding computation before insertion, and oversized input is embedded first and only then rejected downstream by Milvus (max_length=2048), answering HTTP 500 after the expensive embedding has already run.
Proof of concept (live deployment): 50 malicious agents were registered successfully (50/50); /retrieve_assistant with generic capabilities returned malicious agents as its top-3 results; a 2049-character description returned HTTP 500 after the embedding ran; an empty name was accepted with HTTP 200 and a 300-character name returned HTTP 500.
Impact: the integrity of the agent registry is broken because malicious entries dominate retrieval and victim teams invite them automatically; embedding, storage, CPU, and costs can be exhausted by registration floods and oversized descriptions; the poisoned agents are the entry point for further attacks such as identity hijacking, message injection, and code execution.
Suggested fix: require authentication and add rate limits and quotas to /register; validate name and desc at the API layer (non-empty name with a length and character allowlist, desc length cap) before any embedding; filter or score retrieval results so freshly registered agents cannot dominate recall. |
|---|
| 원천 | ⚠️ https://github.com/OpenBMB/IoA/issues/21 |
|---|
| 사용자 | Evo1ution (UID 101872) |
|---|
| 제출 | 2026. 10. 14. PM 04:33 (23 날 ago) |
|---|
| 모더레이션 | 2026. 11. 06. PM 06:12 (23 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 432033 [OpenBMB Internet of Agents 까지 9d78e88e47160eb42ee1ee8538c05e1c2c47877a Agent Registry im_server/app.py register desc/name 약한 인증] |
|---|
| 포인트들 | 20 |
|---|