Latest
●Mem0 memory keys can be forged to read other tenants' chats●vLLM's wildcard CORS default let any website query local servers●Rust zip crate flaw lets archives hide a second filename●Microsoft says agents in Microsoft 365 grew 15-fold in a year●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials●Functype MCP server flaw let tool calls run arbitrary code●Token Security says blast radius matters more than patch speed●OpenAI agent validated 14 leaked Hugging Face tokens
Wednesday, 28 October 2026
6 agent hacks today▼ 4 vs yesterday (10)
The Agentic TimesPowered byVortal

Incident database

Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.

Incidents by month, 2026 · 642 total · click a month to filter
Jan 2026: 23 incidents23JanFeb 2026: 26 incidents26FebMar 2026: 46 incidents46MarApr 2026: 47 incidents47AprMay 2026: 53 incidents53MayJun 2026: 54 incidents54JunJul 2026: 49 incidents49JulAug 2026: 83 incidents83AugSep 2026: 148 incidents148SepOct 2026: 113 incidents113OctNov 2026: 0 incidents0NovDec 2026: 0 incidents0Dec
Incidents by sector · 668 total · click a sector to filter
Clear

148 incidents match

Incident dateIncidentVendorSectorAgentRoot causeSeverityStatus
30 Sept 2026OpenAI Faces Hacking Lawsuit Over AI Agent AttacksOpenAItechnologyotherunknownconfirmed
30 Sept 2026AI Coding Agents Leaked 13,000 Internal Images to Public GitHub ReposGlowtechnologycodingdata leakconfirmed
30 Sept 2026GitPython arbitrary code execution via repository shadowingGitPythontechnologyothermisconfigurationconfirmed
30 Sept 2026pageant: Out-of-bounds read in MemoryMap via malicious Pageant agentrusshtechnologyotherexcessive permissionsconfirmed
29 Sept 2026AI Coding Agents Leaked Sensitive Screenshots to Public GitHub Repostechnologycodingtool misuseconfirmed
29 Sept 2026OpenAI Agents Breach Australian Government Websites Without AuthorizationOpenAIgovernmentbrowsingtool misuseconfirmed
29 Sept 2026AI agent used to breach cybersecurity nonprofit DIVDDIVDotherotherunknownconfirmed
29 Sept 2026Attackers Use Fake ChatGPT Custom GPTs in ClickFix Malware AttacksOpenAItechnologyothertool misuseconfirmed
29 Sept 2026MCP Python SDK Flaw Allowed OAuth Credential Theft by Malicious ServersModel Context Protocoltechnologyothersupply chainresolved
29 Sept 2026OpenAI shelves GPT-6.1 Astra over deception, unauthorized actionsOpenAItechnologyothertool misuseconfirmed
29 Sept 2026Ollama agent mode bash approval bypass via prompt injectionOllamatechnologycodingprompt injectionconfirmed
29 Sept 2026Unsloth Studio Flaw Enabled Code Execution via Model InspectionUnslothtechnologyothermisconfigurationresolved
28 Sept 2026AI Threat Actor 'JadePuffer' Destroys Azure Tenant ResourcesMicrosofttechnologyothermisconfigurationconfirmed
28 Sept 2026code-ollama grep_search Command Injection via Shell Substitutioncode-ollamatechnologycodingtool misuseconfirmed
28 Sept 2026Carbonato Botnet Deploys AI Agent on Hacked Docker Hoststechnologyothermisconfigurationconfirmed
28 Sept 2026Infostealer logs expose AI account logins for 80,000+ organizationstechnologyotherdata leakconfirmed
28 Sept 2026Carbonato Botnet Hijacks Exposed Docker Hosts to Run Hermes AI Agent Malwaretechnologyothermisconfigurationconfirmed
26 Sept 2026GitHub Actions re-enabled with Mini Shai-Hulud payload still activeGitHubtechnologyworkflowsupply chainconfirmed
26 Sept 2026x47.c Windows Botnet Weaponizes xAI Grok API for PersistencexAItechnologyothertool misuseconfirmed
26 Sept 2026OpenAI Discloses AI Agents Interacted With US Government WebsitesOpenAItechnologybrowsingunknownconfirmed
25 Sept 2026CliInvoke OS command injection vulnerabilityAlastair Lundytechnologycodingtool misuseresolved
25 Sept 2026Knowns MCP Path Traversal Vulnerability (CVE-2026-86439)Knownstechnologycodingexcessive permissionsconfirmed
25 Sept 2026BragJack Attack Targets Browser AI Assistantstechnologybrowsingunknownconfirmed
25 Sept 2026CVE-2026-97228: Rapid7 Bulk Export MCP GraphQL query injectionRapid7technologyotherprompt injectionresolved
24 Sept 2026AWS Language Servers arbitrary code execution and file write vulnerabilitiesAWStechnologycodingexcessive permissionsconfirmed
24 Sept 2026DBHub DNS rebinding and read-only bypass vulnerabilitiesBytebasetechnologyothermisconfigurationconfirmed
24 Sept 2026Prompt-Injection Vulnerability Found in Agentic AI App ManusManustechnologyotherprompt injectionconfirmed
24 Sept 2026AI coding tool reported leaking private code repositoriestechnologycodingdata leakconfirmed
24 Sept 2026AI-Powered Attack Campcampaign Targets Hundreds of Online Retailersretailothertool misuseconfirmed
24 Sept 2026ServiceNow AI Platform SQL injection vulnerability CVE-2026-13016ServiceNowtechnologyothermisconfigurationresolved
24 Sept 2026SalesBleed: Salesforce Agentforce flaws enabled 0-click CRM data theft, phishingSalesforcetechnologycustomer serviceprompt injectionresolved
24 Sept 2026langchain-nvidia-ai-endpoints local file disclosure via VLM image inputsNVIDIAtechnologyothermisconfigurationconfirmed
24 Sept 2026Carbonato Malware Uses AI Agents to Hijack Exposed Docker HostsDockertechnologyothermisconfigurationconfirmed
24 Sept 2026Cline Hub Dashboard WebSocket Cross-Origin HijackingClinetechnologyworkflowmisconfigurationconfirmed
24 Sept 2026Decepticon ChatML injection enables arbitrary command executionPurpleAILABtechnologycodingprompt injectionconfirmed
23 Sept 2026Compromised MemTensor npm/PyPI Packages Deliver sckit StealerMemTensortechnologyothersupply chainconfirmed
23 Sept 2026Malicious AI Agents Steal 600K Credit Cards From 100+ Sitesretailothertool misuseconfirmed
23 Sept 2026Attackers Poison AI Chatbot Answers to Spread Phishing and DisinformationOpenAI, Googletechnologybrowsingprompt injectionconfirmed
22 Sept 2026LightRAG API sensitive information exposure and XSS vulnerabilitieslightrag-hkutechnologyothermisconfigurationconfirmed
22 Sept 2026MCP Atlassian: Multiple Critical Vulnerabilities in File Handling and OAuthMCP Atlassiantechnologyotherexcessive permissionsconfirmed
22 Sept 2026MCP Atlassian: Multiple Critical Vulnerabilities in File Upload and SSRFsoopersettechnologyotherexcessive permissionsconfirmed
22 Sept 2026mcp-atlassian incomplete SSRF remediation (CVE-2026-77267)soopersettechnologyothermisconfigurationconfirmed
22 Sept 2026CVE-2026-95660: OS Command Injection in Moonshot AI Kimi CodeMoonshot AItechnologycodingtool misuseresolved
22 Sept 2026New ClosedQuorum Windows malware uses AI to guide attackstechnologyothertool misuseconfirmed
22 Sept 2026Malicious npm Package Impersonates Twilio Security Tool to Steal Credentialstechnologyothersupply chainconfirmed
22 Sept 2026Critical Bifrost AI Gateway Flaw Allows Unauthenticated Command ExecutionBifrosttechnologyothermisconfigurationconfirmed
22 Sept 2026Z.ai's ZCode coding tool covertly uploaded user code to Alibaba CloudZ.aitechnologycodingdata leakresolved
22 Sept 2026Path traversal in @roomi-fields/notebooklm-mcp vault.batch toolroomi-fieldstechnologycodingprompt injectionresolved
22 Sept 2026CKAN MCP Server SSRF via DNS-name resolution bypassaborrusotechnologyotherexcessive permissionsconfirmed
22 Sept 2026Microsoft and UK police dismantle EvilTokens AI-powered phishing kitMicrosofttechnologyothertool misuseresolved