CVE-2026-123963

The OpenBMB Internet of Agents software contains a security vulnerability in the Agent Registry component. Specifically, the register function within the im_server/app.py file fails to perform proper authentication when the desc/name argument is manipulated. This vulnerability allows for remote a...

EUVD-2026-119217

A security vulnerability has been detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. The impacted element is the function register of the file imserver/app.py of the component Agent Registry. Such manipulation of the argument desc/name leads to missing...

EUVD-2026-118523

A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function primaryfieldquery of the file common/utils/milvusutils.py of the component Agent Registry. The manipulation of the argument key results in improper neutralization o...

CVE-2026-123791 OpenBMB Internet of Agents Agent Registry milvus_utils.py _primary_field_query data query logic injection

A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function primaryfieldquery of the file common/utils/milvusutils.py of the component Agent Registry. The manipulation of the argument key results in improper neutralization o...

CVE-2026-123791

A vulnerability exists in OpenBMB Internet of Agents (up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a) within the Agent Registry component. The flaw resides in the _primary_field_query function located in common/utils/milvus_utils.py. Due to the manipulation of the key argument , the applic...

Spring AI Agentic Patterns (Part 4): Subagent Orchestration

Instead of one generalist agent doing everything, delegate to specialized agents. This keeps context windows focused—preventing the clutter that degrades performance. Task tool, part of the spring-ai-agent-utils toolkit, is a portable, model-agnostic Spring AI implementation inspired by Claude...

Race Condition within a Thread

Overview mcp-mesh is a Kubernetes-native platform for distributed MCP applications Affected versions of this package are vulnerable to Race Condition within a Thread due to a Race Condition in Access Control. The agent shutdown process fails to atomically remove agents from the registry before...

Chromium: Information disclosure via "memory_instrumentation::mojom::Coordinator" interface in "resource_coordinator" service(CVE-2018-6080)

VULNERABILITY DETAILS The "memoryinstrumentation::mojom::Coordinator" mojo interface is exposed by the "resourcecoordinator" service, running under the browser process. The interface requires the "app" capability https://cs.chromium.org/chromium/src/services/resourcecoordinator/manifest.json?l=8,...