Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.

Incidents by month, 2026 · 582 total · click a month to filter
Jan 2026: 23 incidents23JanFeb 2026: 26 incidents26FebMar 2026: 46 incidents46MarApr 2026: 47 incidents47AprMay 2026: 53 incidents53MayJun 2026: 54 incidents54JunJul 2026: 47 incidents47JulAug 2026: 83 incidents83AugSep 2026: 146 incidents146SepOct 2026: 57 incidents57OctNov 2026: 0 incidents0NovDec 2026: 0 incidents0Dec
Incidents by sector · 606 total · click a sector to filter
Clear

572 incidents match

Incident dateIncidentVendorSectorAgentRoot causeSeverityStatus
28 Sept 2026Carbonato Botnet Deploys AI Agent on Hacked Docker Hoststechnologyothermisconfigurationconfirmed
26 Sept 2026OpenAI Discloses AI Agents Interacted With US Government WebsitesOpenAItechnologybrowsingunknownconfirmed
26 Sept 2026x47.c Windows Botnet Weaponizes xAI Grok API for PersistencexAItechnologyothertool misuseconfirmed
26 Sept 2026GitHub Actions re-enabled with Mini Shai-Hulud payload still activeGitHubtechnologyworkflowsupply chainconfirmed
25 Sept 2026BragJack Attack Targets Browser AI Assistantstechnologybrowsingunknownconfirmed
25 Sept 2026CliInvoke OS command injection vulnerabilityAlastair Lundytechnologycodingtool misuseresolved
25 Sept 2026CVE-2026-97228: Rapid7 Bulk Export MCP GraphQL query injectionRapid7technologyotherprompt injectionresolved
25 Sept 2026Knowns MCP Path Traversal Vulnerability (CVE-2026-86439)Knownstechnologycodingexcessive permissionsconfirmed
24 Sept 2026AI coding tool reported leaking private code repositoriestechnologycodingdata leakconfirmed
24 Sept 2026langchain-nvidia-ai-endpoints local file disclosure via VLM image inputsNVIDIAtechnologyothermisconfigurationconfirmed
24 Sept 2026SalesBleed: Salesforce Agentforce flaws enabled 0-click CRM data theft, phishingSalesforcetechnologycustomer serviceprompt injectionresolved
24 Sept 2026Decepticon ChatML injection enables arbitrary command executionPurpleAILABtechnologycodingprompt injectionconfirmed
24 Sept 2026AWS Language Servers arbitrary code execution and file write vulnerabilitiesAWStechnologycodingexcessive permissionsconfirmed
24 Sept 2026Cline Hub Dashboard WebSocket Cross-Origin HijackingClinetechnologyworkflowmisconfigurationconfirmed
24 Sept 2026ServiceNow AI Platform SQL injection vulnerability CVE-2026-13016ServiceNowtechnologyothermisconfigurationresolved
24 Sept 2026Carbonato Malware Uses AI Agents to Hijack Exposed Docker HostsDockertechnologyothermisconfigurationconfirmed
24 Sept 2026Prompt-Injection Vulnerability Found in Agentic AI App ManusManustechnologyotherprompt injectionconfirmed
24 Sept 2026DBHub DNS rebinding and read-only bypass vulnerabilitiesBytebasetechnologyothermisconfigurationconfirmed
23 Sept 2026Compromised MemTensor npm/PyPI Packages Deliver sckit StealerMemTensortechnologyothersupply chainconfirmed
23 Sept 2026Attackers Poison AI Chatbot Answers to Spread Phishing and DisinformationOpenAI, Googletechnologybrowsingprompt injectionconfirmed
22 Sept 2026OpenBao Agent writes secrets to stdout in error conditionsOpenBaotechnologyothermisconfigurationresolved
22 Sept 2026Home Assistant mDNS Server-Side Request ForgeryHome Assistanttechnologyothermisconfigurationconfirmed
22 Sept 2026MCP Atlassian: Multiple Critical Vulnerabilities in File Handling and OAuthMCP Atlassiantechnologyotherexcessive permissionsconfirmed
22 Sept 2026LightRAG API sensitive information exposure and XSS vulnerabilitieslightrag-hkutechnologyothermisconfigurationconfirmed
22 Sept 2026Microsoft and UK police dismantle EvilTokens AI-powered phishing kitMicrosofttechnologyothertool misuseresolved
22 Sept 2026New Windows malware CLOSEDQUORUM uses LLMs to pick post-compromise actionstechnologyothertool misuseconfirmed
22 Sept 2026New ClosedQuorum Windows malware uses AI to guide attackstechnologyothertool misuseconfirmed
22 Sept 2026CVE-2026-95660: OS Command Injection in Moonshot AI Kimi CodeMoonshot AItechnologycodingtool misuseresolved
22 Sept 2026mcp-atlassian incomplete SSRF remediation (CVE-2026-77267)soopersettechnologyothermisconfigurationconfirmed
22 Sept 2026Critical Bifrost AI Gateway Flaw Allows Unauthenticated Command ExecutionBifrosttechnologyothermisconfigurationconfirmed
22 Sept 2026CKAN MCP Server SSRF via DNS-name resolution bypassaborrusotechnologyotherexcessive permissionsconfirmed
22 Sept 2026Path traversal in @roomi-fields/notebooklm-mcp vault.batch toolroomi-fieldstechnologycodingprompt injectionresolved
22 Sept 2026Malicious npm Package Impersonates Twilio Security Tool to Steal Credentialstechnologyothersupply chainconfirmed
22 Sept 2026MCP Atlassian: Multiple Critical Vulnerabilities in File Upload and SSRFsoopersettechnologyotherexcessive permissionsconfirmed
22 Sept 2026Windows malware CLOSEDQUORUM lets AI models vote on next movetechnologyotherunknownconfirmed
22 Sept 2026Z.ai's ZCode coding tool covertly uploaded user code to Alibaba CloudZ.aitechnologycodingdata leakresolved
21 Sept 2026Meta Muse macOS App Flaw Lets Local Malware Redirect Dictation TrafficMetatechnologyothermisconfigurationconfirmed
19 Sept 2026BragJack: PoC attack hijacks AI browser agents via malicious extensionMultiple (Google, Microsoft, Opera, Perplexity, Anthropic)technologybrowsingprompt injectionconfirmed
19 Sept 2026Claude Opus 5 Helped Researchers Hijack OpenAI Staff Accounts via Chained FlawsOpenAItechnologyothermisconfigurationconfirmed
18 Sept 2026ToolHive containerized MCP servers bypass isolation via host.docker.internalStackloktechnologyothermisconfigurationconfirmed
18 Sept 2026Microsoft Patches CVSS 10.0 Azure AI Foundry Privilege Escalation FlawMicrosofttechnologyothermisconfigurationresolved
18 Sept 2026Process Compose DNS rebinding vulnerability in MCP SSEF1bonacc1technologyworkflowmisconfigurationconfirmed
18 Sept 2026Critical Orkes Conductor RCE Vulnerability Exploited in AttacksOrkestechnologyworkflowunknownconfirmed
18 Sept 2026Prompt Injection Flaw in AWS AgentCore Harness Can Leak CredentialsAWStechnologyotherprompt injectionconfirmed
18 Sept 2026Plugin4Shell Flaw Lets Attackers Swap Pinned Plugins in AI Coding AgentsAnthropic, OpenAI, GitHubtechnologycodingsupply chainconfirmed
17 Sept 2026Skipper OPA body-authz bypass with chunked/HTTP-2 requestsZalandotechnologyothermisconfigurationconfirmed
17 Sept 2026Zero-click 'Plugin4Shell' RCE flaw found in major AI coding agentsMultiple (Anthropic, OpenAI, Google, Microsoft)technologycodingsupply chainconfirmed
17 Sept 2026GitHub Copilot CLI vulnerable to encrypted prompt injection attack (CCI)GitHubtechnologycodingprompt injectiondisputed
17 Sept 2026Research Shows AI Agents Can Retrain Own Models Mid-TaskIrregulartechnologyothertool misuseconfirmed
17 Sept 2026New RatHat Android Malware Uses AI to Automate Device Controltechnologyotherunknownconfirmed