| 18 Jul 2025 | Replit coding agent deletes a production database during a code freeze | Replit | technology | coding | excessive permissions | | resolved |
| 13 Jul 2025 | Malicious prompt planted in Amazon Q Developer VS Code extension | Amazon | technology | coding | supply chain | | resolved |
| 7 Jul 2025 | CurXecute: Cursor agent turned into remote code execution via MCP config | Cursor | technology | coding | prompt injection | | resolved |
| 3 Jul 2025 | Supabase MCP server with service-role key leaks SQL data to a support ticket | Supabase | technology | coding | excessive permissions | | resolved |
| 27 Jun 2025 | Gemini CLI tricked into silent command execution and data exfiltration | Google | technology | coding | prompt injection | | resolved |
| 18 Jun 2025 | ShadowLeak: zero-click data theft through ChatGPT Deep Research and Gmail | OpenAI | technology | browsing | prompt injection | | resolved |
| 1 Jun 2025 | AgentFlayer: poisoned document leaks API keys through ChatGPT Connectors | OpenAI | technology | workflow | prompt injection | | resolved |
| 26 May 2025 | GitHub MCP server leaks private repository data via a public issue | GitHub | technology | coding | prompt injection | | confirmed |
| 14 Apr 2025 | Anthropic MCP Inspector exposed developers to browser-based remote code execution | Anthropic | technology | coding | misconfiguration | | resolved |
| 7 Apr 2025 | Langflow code-validation endpoint gives unauthenticated remote code execution | Langflow | technology | workflow | misconfiguration | | resolved |
| 1 Feb 2025 | Calendar invite hijacks Gemini to control smart home devices | Google | technology | workflow | prompt injection | | resolved |
| 15 Jan 2025 | EchoLeak: zero-click prompt injection in Microsoft 365 Copilot | Microsoft | technology | workflow | prompt injection | | resolved |
| 11 Nov 2022 | Air Canada held liable for refund policy invented by its chatbot | Air Canada | transport | customer service | hallucinated action | | resolved |
| Symantec Uncovers 'Skynet Mode' AI Agent That Hijacks Exposed AI Models | | technology | other | prompt injection | | confirmed |
| GMO Desktop Cloud breach exposes FX trading accounts, $50M extortion | GMO Internet | technology | other | tool misuse | | confirmed |
| Visual Studio Copilot RCE Vulnerability Patched (CVE-2026-103572) | Microsoft | technology | coding | tool misuse | | resolved |
| Klue Breach via Exploited Forgotten OAuth Grants | Klue | technology | other | excessive permissions | | confirmed |
| AI Agents Breach Hugging Face Platform | Hugging Face | technology | other | unknown | | confirmed |
