Latest
●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials●Functype MCP server flaw let tool calls run arbitrary code●Token Security says blast radius matters more than patch speed●OpenAI agent validated 14 leaked Hugging Face tokens●123 Reg says customer data taken in 'AI-driven cyberattack'●Infisical raises $40m to secure AI agents' access to secrets●MLflow autologging writes CrewAI API keys into trace data●AI agent finds four severe flaws in EPICS control software
Wednesday, 28 October 2026
5 agent hacks today▼ 5 vs yesterday (10)
The Agentic TimesPowered byVortal

Incident database

Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.

Incidents by month, 2026 · 641 total · click a month to filter
Jan 2026: 23 incidents23JanFeb 2026: 26 incidents26FebMar 2026: 46 incidents46MarApr 2026: 47 incidents47AprMay 2026: 53 incidents53MayJun 2026: 54 incidents54JunJul 2026: 49 incidents49JulAug 2026: 83 incidents83AugSep 2026: 148 incidents148SepOct 2026: 112 incidents112OctNov 2026: 0 incidents0NovDec 2026: 0 incidents0Dec
Incidents by sector · 667 total · click a sector to filter
Clear

83 incidents match

Incident dateIncidentVendorSectorAgentRoot causeSeverityStatus
31 Aug 2026Origin validation error in ash_ai MCP server allows DNS rebinding attacksash-projecttechnologyothermisconfigurationconfirmed
31 Aug 2026CVE-2026-82905: SSRF in sdcb chats McpControllersdcbtechnologyothertool misusereported
31 Aug 2026Meta Researcher's AI Agent Accidentally Deleted Her EmailsMetatechnologyotherhallucinated actionreported
28 Aug 2026Multiple vulnerabilities in Microsoft Copilot productsMicrosofttechnologyothermisconfigurationreported
28 Aug 2026SiYuan path traversal and path guard bypass vulnerabilitiesSiYuantechnologyotherprompt injectionconfirmed
28 Aug 2026Hatchet Dispatcher gRPC Service Missing Tenant VerificationHatchettechnologyworkflowmisconfigurationresolved
27 Aug 2026GitLab AI Gateway credential disclosure vulnerabilitiesGitLabtechnologyotherprompt injectionresolved
27 Aug 2026mcp-go HTTP Host header validation vulnerabilitymark3labstechnologyothermisconfigurationresolved
27 Aug 2026mcp-router CLI exposed MCP aggregator without authentication by defaultmcp-routertechnologyothermisconfigurationresolved
27 Aug 2026CVE-2026-81096: ToolUniverse sandbox escape and unauthenticated RCEToolUniversetechnologycodingexcessive permissionsconfirmed
27 Aug 2026Dash MCP server DNS rebinding via missing host header validationDropboxtechnologyothermisconfigurationresolved
27 Aug 2026ServiceNow AI platform code injection and SQL injection vulnerabilitiesServiceNowtechnologyotherunknownresolved
27 Aug 2026DNS Rebinding Vulnerability in Timescale MCP ToolsTimescaletechnologyothermisconfigurationconfirmed
27 Aug 2026CVE-2026-81093: Apify MCP Server SSRF in get-html-skeleton toolApifytechnologybrowsingexcessive permissionsresolved
27 Aug 2026UI-TARS-desktop MCP servers bind to all interfaces without authenticationByteDancetechnologyothermisconfigurationconfirmed
27 Aug 2026Telnyx MCP Server Missing Authentication on HTTP TransportTelnyxtelecomscodingmisconfigurationresolved
27 Aug 2026Agno Remote Code Execution via Prompt InjectionAgnotechnologycodingprompt injectionreported
27 Aug 2026Nightingale SSRF vulnerability in http_fetch AI-agent toolNightingaletechnologyothermisconfigurationconfirmed
27 Aug 2026mcp-use Inspector Proxy SSRF via Unvalidated Target URLmcp-usetechnologyothermisconfigurationresolved
26 Aug 2026CVE-2026-75062: Eval Injection in Google langfunGoogletechnologycodingprompt injectionconfirmed
25 Aug 2026mcp-shell Multiple Command Execution Vulnerabilitiessoniricotechnologycodingmisconfigurationresolved
25 Aug 2026CVE-2026-55529: PraisonAI Origin Validation BypassMervinPraisontechnologyworkflowmisconfigurationresolved
25 Aug 2026Nextcloud MCP Server unauthenticated webhook endpoint allows index deletionNextcloudtechnologycodingmisconfigurationresolved
25 Aug 2026CVE-2026-55637: genieacs-mcp DNS rebinding vulnerabilityGeiserXtechnologyothermisconfigurationresolved
25 Aug 2026Prompt injection in Amazon Strands Agents Tools python_replAmazontechnologycodingprompt injectionconfirmed
25 Aug 2026Path traversal in sublinear-time-solver and consciousness-explorerruvnettechnologyothermisconfigurationresolved
25 Aug 2026MCP PHP SDK Memory Exhaustion VulnerabilityAnthropictechnologyothertool misuseresolved
25 Aug 2026Dradis CE SSRF via unrestricted AI provider addressDradistechnologycodingexcessive permissionsreported
24 Aug 2026Continue CLI incomplete denylist allows destructive commandsContinuetechnologyworkflowprompt injectionreported
21 Aug 2026Infracost symlink traversal and token disclosure vulnerabilitiesInfracosttechnologycodingtool misuseresolved
21 Aug 2026Spring AI MCP Streamable HTTP server memory exhaustion DoSSpringtechnologyothermisconfigurationreported
20 Aug 2026AI Agent by SiteGround WordPress plugin authorization bypassSiteGroundtechnologycodingexcessive permissionsreported
20 Aug 2026Neo.mjs command injection in FileSystemService.mjsNeo.mjstechnologycodingtool misuseresolved
20 Aug 2026LangBot MCP Server RCE via Insufficient AuthorizationLangBottechnologycodingexcessive permissionsreported
20 Aug 2026LangChain SitemapLoader SSRF bypass via nested sitemap entriesLangChaintechnologyotherexcessive permissionsreported
19 Aug 2026marimo Code Injection via MCP Server Configurationmarimo-teamtechnologycodingprompt injectionconfirmed
19 Aug 2026Splunk AI Toolkit privilege escalation and MCP Server command executionSplunktechnologycodingexcessive permissionsreported
19 Aug 2026Agno PythonTools path traversal vulnerability CVE-2026-76832Agnotechnologycodingprompt injectionreported
18 Aug 2026Apify MCP Server API Token Exposure via URL RedirectionApifytechnologycodingprompt injectionresolved
18 Aug 2026Command Injection and SSRF Vulnerabilities in Microsoft CopilotMicrosofttechnologycodingprompt injectionreported
18 Aug 2026ArcadeDB authorization bypass in set_server_setting MCP toolArcadeDatatechnologyotherexcessive permissionsresolved
18 Aug 2026CodeWhale Multiple Vulnerabilities in Versions 0.8.41-0.8.63CodeWhaletechnologycodingprompt injectionresolved
18 Aug 2026CVE-2026-75130: Context7 prompt injection via Custom AI InstructionsContext7technologycodingprompt injectionreported
17 Aug 2026CVE-2026-19984: SSRF in jkawamoto mcp-florence2jkawamototechnologyothertool misuseconfirmed
17 Aug 2026MLflow multiple vulnerabilities in versions prior to 3.15.0MLflowtechnologyotherexcessive permissionsresolved
17 Aug 2026MemOS Authentication Bypass via Unset Internal Service SecretMemTensortechnologyothermisconfigurationreported
14 Aug 2026CVE-2026-49986: Cortex MCP Arbitrary Code Execution via Environment VariableCortextechnologycodingmisconfigurationconfirmed
14 Aug 2026mcp-memory-service authentication bypass in document endpointsmcp-memory-servicetechnologyothermisconfigurationconfirmed
14 Aug 2026Multiple vulnerabilities in CKAN MCP Server prior to 0.4.112ondatatechnologyothermisconfigurationresolved
14 Aug 2026MindsDB Minds Platform unauthenticated RCE via scratchpad toolMindsDBtechnologycodingexcessive permissionsreported