Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.

Incidents by month, 2026 · 582 total · click a month to filter
Jan 2026: 23 incidents23JanFeb 2026: 26 incidents26FebMar 2026: 46 incidents46MarApr 2026: 47 incidents47AprMay 2026: 53 incidents53MayJun 2026: 54 incidents54JunJul 2026: 47 incidents47JulAug 2026: 83 incidents83AugSep 2026: 146 incidents146SepOct 2026: 57 incidents57OctNov 2026: 0 incidents0NovDec 2026: 0 incidents0Dec
Incidents by sector · 606 total · click a sector to filter
Clear

572 incidents match

Incident dateIncidentVendorSectorAgentRoot causeSeverityStatus
15 Oct 2026IntentKit authorization bypass allows unauthorized tool executionIntentKittechnologyotherexcessive permissionsconfirmed
15 Oct 2026Nginx UI: Multiple MCP vulnerabilities bypass security controls0xJackytechnologyotherexcessive permissionsconfirmed
15 Oct 2026Nezha Monitoring Whole-Instance DoS via Race ConditionNezhatechnologyothertool misuseconfirmed
15 Oct 2026Critical Authenticated RCE Flaw in Langflow Actively ExploitedDataStaxtechnologyworkflowunknownconfirmed
15 Oct 2026Researchers show prompt injection can hijack TypeSafe AI's Jev decision modelTypeSafe AItechnologybrowsingprompt injectionconfirmed
15 Oct 2026MCP Python SDK Resource Exhaustion via Unbounded Session AccumulationAnthropictechnologyothermisconfigurationconfirmed
15 Oct 2026Researchers find prompt-injection attempts hidden in website HTTP headersSignals Corpstechnologybrowsingprompt injectionconfirmed
13 Oct 2026Roo Code command approval bypass vulnerabilities (CVE-2026-110202 through CVE-2026-110206)Roo Code Inctechnologycodingprompt injectionconfirmed
12 Oct 2026mac-shell-mcp OS command injection via shell metacharacterscfdudetechnologyotherprompt injectionconfirmed
12 Oct 2026Nginx UI MCP Tool Bypasses Configuration Validation0xJackytechnologyotherprompt injectionconfirmed
11 Oct 2026Abilityai Trinity missing authorization in Telegram routerAbilityaitechnologyotherprompt injectionconfirmed
10 Oct 2026CVE-2026-108583: zotero-mcp SSRF vulnerability via prompt injectionzotero-mcptechnologybrowsingprompt injectionconfirmed
10 Oct 2026mini-swe-agent environment variable exposure via prompt injectionSWE-agenttechnologycodingprompt injectionconfirmed
10 Oct 2026Symlink vulnerabilities in phi and open-multi-agent frameworksPulse AI Club / Open Multi Agenttechnologycodingprompt injectionconfirmed
8 Oct 2026GhostAction Campaign Compromises 1,900 GitHub Accounts, Hits 30,000 ReposGitHubtechnologyothersupply chainconfirmed
8 Oct 2026'AgentCorruption' Flaw in AWS Bedrock AgentCore Could Enable Fleet TakeoverAWStechnologyworkflowprompt injectionresolved
8 Oct 2026Mechanize library leaks credentials on HTTP redirectsmechanizetechnologyothermisconfigurationconfirmed
8 Oct 2026Banks: Prompt Injection via User-Controlled Chat MessagesBankstechnologyotherprompt injectionconfirmed
8 Oct 2026PraisonAI: Multiple Critical Security VulnerabilitiesPraisonAItechnologyworkflowexcessive permissionsconfirmed
8 Oct 2026Tensorlake npm Package Compromised with Shai-Hulud Credential-Stealing WormTensorlaketechnologycodingsupply chainconfirmed
7 Oct 2026Next.js development server exposes MCP endpoint to CSRF attacksVerceltechnologyothermisconfigurationconfirmed
7 Oct 2026Unpatched Critical RCE Flaw Found in LMCache LLM Caching ServerLMCachetechnologyotherexcessive permissionsconfirmed
7 Oct 2026Actual Sync Server CORS Proxy GitHub API Allowlist BypassActual Budgettechnologyothermisconfigurationconfirmed
7 Oct 2026Flowise Critical Vulnerabilities: RCE via Sandbox Escape and Prompt InjectionFlowisetechnologyworkflowprompt injectionconfirmed
7 Oct 2026PraisonAI AgentMail webhook signature verification bypassPraisonAItechnologyothermisconfigurationconfirmed
6 Oct 2026Knowns LSP OS Command Injection via Malicious config.jsonKnownstechnologycodingmisconfigurationconfirmed
6 Oct 2026Payload CMS MCP Plugin Improper Access Control VulnerabilityPayloadtechnologyotherexcessive permissionsconfirmed
6 Oct 2026vLLM cache_salt dropped in Harmony tool continuationsvLLMtechnologyworkflowmisconfigurationconfirmed
6 Oct 2026LangChain RediSearch Filter Injection VulnerabilityLangChaintechnologyotherprompt injectionconfirmed
6 Oct 2026Researcher finds KVM zero-day VM escape via Vercel bug bountyVerceltechnologyotherunknownconfirmed
5 Oct 2026PyJWT accepts inconsistent OKP JWKs, allowing key identity confusionPyJWTtechnologyothermisconfigurationconfirmed
5 Oct 2026Langflow: Weak Fernet Key via random.seed()Langflowtechnologyothermisconfigurationconfirmed
5 Oct 2026simple-git command execution via Git config include pathsimple-gittechnologycodingexcessive permissionsconfirmed
5 Oct 2026OpenClaw channel read actions bypass allowlistsOpenClawtechnologyothermisconfigurationconfirmed
5 Oct 2026Langflow: Multiple Code Execution VulnerabilitiesLangflowtechnologyworkflowprompt injectionconfirmed
1 Oct 2026AI Engine WordPress Plugin Stored XSS via Prompt InjectionMeow Appstechnologyotherprompt injectionconfirmed
30 Sept 2026OpenAI Faces Hacking Lawsuit Over AI Agent AttacksOpenAItechnologyotherunknownconfirmed
30 Sept 2026AI Coding Agents Leaked 13,000 Internal Images to Public GitHub ReposGlowtechnologycodingdata leakconfirmed
30 Sept 2026GitPython arbitrary code execution via repository shadowingGitPythontechnologyothermisconfigurationconfirmed
30 Sept 2026pageant: Out-of-bounds read in MemoryMap via malicious Pageant agentrusshtechnologyotherexcessive permissionsconfirmed
29 Sept 2026Ollama agent mode bash approval bypass via prompt injectionOllamatechnologycodingprompt injectionconfirmed
29 Sept 2026Attackers Use Fake ChatGPT Custom GPTs in ClickFix Malware AttacksOpenAItechnologyothertool misuseconfirmed
29 Sept 2026OpenAI shelves GPT-6.1 Astra over deception, unauthorized actionsOpenAItechnologyothertool misuseconfirmed
29 Sept 2026MCP Python SDK Flaw Allowed OAuth Credential Theft by Malicious ServersModel Context Protocoltechnologyothersupply chainresolved
29 Sept 2026AI Coding Agents Leaked Sensitive Screenshots to Public GitHub Repostechnologycodingtool misuseconfirmed
29 Sept 2026Unsloth Studio Flaw Enabled Code Execution via Model InspectionUnslothtechnologyothermisconfigurationresolved
28 Sept 2026Infostealer logs expose AI account logins for 80,000+ organizationstechnologyotherdata leakconfirmed
28 Sept 2026Carbonato Botnet Hijacks Exposed Docker Hosts to Run Hermes AI Agent Malwaretechnologyothermisconfigurationconfirmed
28 Sept 2026code-ollama grep_search Command Injection via Shell Substitutioncode-ollamatechnologycodingtool misuseconfirmed
28 Sept 2026AI Threat Actor 'JadePuffer' Destroys Azure Tenant ResourcesMicrosofttechnologyothermisconfigurationconfirmed