A vulnerability (CVE-2026-123964) was identified in OpenBMB Internet of Agents, affecting versions up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. The vulnerability occurs in the launchgoal function of the Collaboration Layer's communicationlayer.py file, caused by manipulating the maxturns argument, resulting in an infinite loop that can be exploited remotely. The exploit is now publicly available, and users are advised to exercise caution. Since OpenBMB uses a rolling release model, specific version information is not provided.