CVE-2026-123675 Details

A code injection vulnerability has been identified in the OpenBMB Internet of Agents project, affecting versions prior to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. The issue arises in the Code Executor Tool, specifically within the execute_code function of the file im_client/agents/tools/code_executor.py. The vulnerability allows for arbitrary code execution by manipulating the filename and language arguments, with the potential for remote exploitation.

To address this vulnerability, the code execution should be confined to a non-privileged Docker container with an allowlisted, read-only filesystem and no network access by default. It is also important to validate the filename argument to ensure it only accepts basenames and restricts file extensions. Implementing memory, CPU, process, and timeout limits, such as using cgroups, can help mitigate the impact of exploitation. Additionally, shell languages should be disabled by default and require explicit authorization for tool calls. Finally, remove any privileged access and mounts of the Docker socket from the tool-agent containers.