The vulnerability lies in the launch_goal function of the communication layer, where an unvalidated max_turns argument leads to an unbounded infinite loop. This results in a denial of service by consuming CPU resources until the process is terminated. The flaw is a classic instance of unchecked loop control and goes beyond the scope of the function’s normal operation. The attacker can trigger it remotely by sending a malformed request that manipulates the max_turns value, leading to the loop that never exits.

The affected product is OpenBMB Internet of Agents, specifically the Collaboration Layer component. No specific version numbers are available due to the rolling release model, but all releases prior to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a are impacted.

The CVSS score of 5.3 indicates a moderate impact, but the vulnerability can still be leveraged for denial of service if an attacker has network access to the target system. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is remote, and the exploit is already public, meaning that adversaries can freely locate the detailed exploit code on the issue tracker and the vulnerability database pages.