| 제목 | OpenBMB Internet of Agents(IoA) 9d78e88 Excessive Iteration |
|---|
| 설명 | A vulnerability was found in OpenBMB Internet of Agents up to commit 9d78e88. This vulnerability affects the function launch_goal of the file im_client/communication/communication_layer.py of the component Collaboration Layer. The manipulation of the argument max_turns leads to excessive iteration. It is possible to launch the attack remotely.
Details: LaunchGoalParam.max_turns defaults to None (unlimited) and is not validated. The launch_goal conclusion polling is a while True loop with asyncio.sleep(5) and no timeout, so if no member sends a CONCLUSION message the coroutine never exits. When max_turns is reached the code only appends a prompt asking the model to conclude and applies no hard cutoff, so a non-compliant or silent member keeps the discussion running. A silent or dead member can therefore hang the whole group discussion indefinitely while LLM tokens and compute continue to be consumed.
Proof of concept: launch a minimal task with max_turns=1 and a team member that does not send CONCLUSION; the /launch_goal request does not return (verified live: no response after 240 seconds, and the task only ended after a CONCLUSION message was injected into the session). A bounded local reproduction also shows the polling coroutine never returns while conclusion remains None.
Impact: teams hang indefinitely and tokens and compute are continuously consumed - a sustained resource-exhaustion denial of service. A malicious or unresponsive member can trigger this state deliberately by staying silent or never concluding.
Suggested fix: enforce a hard server-side turn cap and broadcast CONCLUSION when it is reached; add a timeout and fallback conclusion to the polling; validate the max_turns range; add a watchdog that auto-concludes timed-out async tasks. |
|---|
| 원천 | ⚠️ https://github.com/OpenBMB/IoA/issues/22 |
|---|
| 사용자 | Evo1ution (UID 101872) |
|---|
| 제출 | 2026. 10. 14. PM 04:36 (23 날 ago) |
|---|
| 모더레이션 | 2026. 11. 06. PM 06:12 (23 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 432034 [OpenBMB Internet of Agents 까지 9d78e88e47160eb42ee1ee8538c05e1c2c47877a Collaboration Layer communication_layer.py launch_goal max_turns 서비스 거부] |
|---|
| 포인트들 | 20 |
|---|