What happened
A SQL-injection vulnerability in the OpenBMB Internet of Agents Agent Registry: the _primary_field_query function in common/utils/milvus_utils.py does not properly neutralize the 'key' argument, allowing a remote attacker to inject into the data-query logic. The exploit is public; the project is a rolling release and has not responded.
Why it matters
The agent registry holds agent metadata used for orchestration/discovery; SQL injection there could let an attacker read or tamper with which agents are registered and how they are resolved in a multi-agent deployment.
Attack vector
Remote manipulation of the 'key' argument in _primary_field_query (CWE-20 / CWE-943 improper neutralization in data-query logic) leading to SQL injection against the agent-registry database. Public PoC available.
Affected systems
OpenBMB Internet of Agents (rolling release, up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a); no versioned fix released
Mitigation
No official fix published — the maintainers have not responded. Restrict exposure and treat the agent registry's data query as attacker-influenced input.