The vulnerability resides in the _primary_field_query function of the Agent Registry component of OpenBMB Internet of Agents. The function does not properly neutralize special elements supplied in the key argument, resulting in a data query logic injection flaw. An attacker can craft requests that alter the query semantics, potentially exposing or manipulating data beyond the intended scope. This type of injection is classified under CWE-20 (Improper Input Validation) and CWE-943 (External Control of System or Resource Consuming Functions). The impact, therefore, could be unintended data disclosure or malicious manipulation of the system’s internal state, depending on downstream handling of the query results.

The affected product is OpenBMB: Internet of Agents. No specific version numbers are available because the project follows a rolling release model. Therefore, any deployment running the OpenBMB Internet of Agents code before the commit that fixes this issue is vulnerable.

The CVSS score of 6.9 indicates a moderate to high severity vulnerability. No EPSS score is currently available, and the issue is not listed in the CISA KEV catalog. The attack vector is inferred to be remote, as the description explicitly states that the exploit can be launched remotely. The lack of a patch at the time of writing and the public availability of the exploit mean the risk is elevated until a fixed release is deployed. No specific prerequisites beyond the ability to send manipulated queries to the Agent Registry component are mentioned, so any user with network access to the target system could potentially exploit the flaw.