Latest
●Mem0 memory keys can be forged to read other tenants' chats●vLLM's wildcard CORS default let any website query local servers●Rust zip crate flaw lets archives hide a second filename●Microsoft says agents in Microsoft 365 grew 15-fold in a year●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials●Functype MCP server flaw let tool calls run arbitrary code●Token Security says blast radius matters more than patch speed●OpenAI agent validated 14 leaked Hugging Face tokens
Wednesday, 28 October 2026
6 agent hacks today▼ 4 vs yesterday (10)
The Agentic TimesPowered byVortal

Incident database

Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.

Incidents by month, 2026 · 642 total · click a month to filter
Jan 2026: 23 incidents23JanFeb 2026: 26 incidents26FebMar 2026: 46 incidents46MarApr 2026: 47 incidents47AprMay 2026: 53 incidents53MayJun 2026: 54 incidents54JunJul 2026: 49 incidents49JulAug 2026: 83 incidents83AugSep 2026: 148 incidents148SepOct 2026: 113 incidents113OctNov 2026: 0 incidents0NovDec 2026: 0 incidents0Dec
Incidents by sector · 668 total · click a sector to filter

668 incidents

Incident dateIncidentVendorSectorAgentRoot causeSeverityStatus
5 Oct 2026Langflow: Multiple Code Execution VulnerabilitiesLangflowtechnologyworkflowprompt injectionconfirmed
3 Oct 2026AI-discovered Rejetto HFS auth-bypass flaw exploited in the wildRejettootherotherunknownconfirmed
2 Oct 2026A2UI web_core: openUrl permits javascript: URI executionA2UIotherworkflowprompt injectionconfirmed
2 Oct 2026Trigger.dev CLI debug logs expose resolved environment secretsTrigger.devotherworkflowmisconfigurationconfirmed
2 Oct 2026Trigger.dev: Server-side request forgery via webhook alert channelsTrigger.devotherworkflowexcessive permissionsconfirmed
2 Oct 2026Critical RCE Vulnerability Patched in GitLab AI Gateway (Duo Agent Platform)GitLabothercodingexcessive permissionsresolved
2 Oct 2026rmcp OAuth client SSRF via server-controlled resource_metadata URLModel Context Protocol (rmcp)otherothermisconfigurationconfirmed
2 Oct 2026Vibe-Trading LLM agent multiple critical vulnerabilitiesVibe-Tradingothercodingexcessive permissionsconfirmed
2 Oct 2026Headroom WebSocket server vulnerable to Cross-Site hijacking (CVE-2026-71416)Headroomotherothermisconfigurationconfirmed
1 Oct 2026AI Engine WordPress Plugin Stored XSS via Prompt InjectionMeow Appstechnologyotherprompt injectionconfirmed
1 Oct 2026AI agents attempted to hack US and Canadian government websitesotherotherunknownconfirmed
1 Oct 2026vm2 exposes host HTTPS credentials through globalAgentvm2otherotherexcessive permissionsconfirmed
1 Oct 2026Office-PowerPoint-MCP-Server path traversal via prompt injectionGongRzheothercodingprompt injectionconfirmed
30 Sept 2026pageant: Out-of-bounds read in MemoryMap via malicious Pageant agentrusshtechnologyotherexcessive permissionsconfirmed
30 Sept 2026GitPython arbitrary code execution via repository shadowingGitPythontechnologyothermisconfigurationconfirmed
30 Sept 2026AI Coding Agents Leaked 13,000 Internal Images to Public GitHub ReposGlowtechnologycodingdata leakconfirmed
30 Sept 2026OpenAI Faces Hacking Lawsuit Over AI Agent AttacksOpenAItechnologyotherunknownconfirmed
29 Sept 2026Attackers Use Fake ChatGPT Custom GPTs in ClickFix Malware AttacksOpenAItechnologyothertool misuseconfirmed
29 Sept 2026AI agent used to breach cybersecurity nonprofit DIVDDIVDotherotherunknownconfirmed
29 Sept 2026Unsloth Studio Flaw Enabled Code Execution via Model InspectionUnslothtechnologyothermisconfigurationresolved
29 Sept 2026MCP Python SDK Flaw Allowed OAuth Credential Theft by Malicious ServersModel Context Protocoltechnologyothersupply chainresolved
29 Sept 2026AI Coding Agents Leaked Sensitive Screenshots to Public GitHub Repostechnologycodingtool misuseconfirmed
29 Sept 2026OpenAI Agents Breach Australian Government Websites Without AuthorizationOpenAIgovernmentbrowsingtool misuseconfirmed
29 Sept 2026OpenAI shelves GPT-6.1 Astra over deception, unauthorized actionsOpenAItechnologyothertool misuseconfirmed
29 Sept 2026Ollama agent mode bash approval bypass via prompt injectionOllamatechnologycodingprompt injectionconfirmed
28 Sept 2026Carbonato Botnet Hijacks Exposed Docker Hosts to Run Hermes AI Agent Malwaretechnologyothermisconfigurationconfirmed
28 Sept 2026AI Threat Actor 'JadePuffer' Destroys Azure Tenant ResourcesMicrosofttechnologyothermisconfigurationconfirmed
28 Sept 2026Infostealer logs expose AI account logins for 80,000+ organizationstechnologyotherdata leakconfirmed
28 Sept 2026code-ollama grep_search Command Injection via Shell Substitutioncode-ollamatechnologycodingtool misuseconfirmed
28 Sept 2026Carbonato Botnet Deploys AI Agent on Hacked Docker Hoststechnologyothermisconfigurationconfirmed
26 Sept 2026GitHub Actions re-enabled with Mini Shai-Hulud payload still activeGitHubtechnologyworkflowsupply chainconfirmed
26 Sept 2026x47.c Windows Botnet Weaponizes xAI Grok API for PersistencexAItechnologyothertool misuseconfirmed
26 Sept 2026OpenAI Discloses AI Agents Interacted With US Government WebsitesOpenAItechnologybrowsingunknownconfirmed
25 Sept 2026Knowns MCP Path Traversal Vulnerability (CVE-2026-86439)Knownstechnologycodingexcessive permissionsconfirmed
25 Sept 2026CVE-2026-97228: Rapid7 Bulk Export MCP GraphQL query injectionRapid7technologyotherprompt injectionresolved
25 Sept 2026BragJack Attack Targets Browser AI Assistantstechnologybrowsingunknownconfirmed
25 Sept 2026CliInvoke OS command injection vulnerabilityAlastair Lundytechnologycodingtool misuseresolved
24 Sept 2026Prompt-Injection Vulnerability Found in Agentic AI App ManusManustechnologyotherprompt injectionconfirmed
24 Sept 2026SalesBleed: Salesforce Agentforce flaws enabled 0-click CRM data theft, phishingSalesforcetechnologycustomer serviceprompt injectionresolved
24 Sept 2026DBHub DNS rebinding and read-only bypass vulnerabilitiesBytebasetechnologyothermisconfigurationconfirmed
24 Sept 2026langchain-nvidia-ai-endpoints local file disclosure via VLM image inputsNVIDIAtechnologyothermisconfigurationconfirmed
24 Sept 2026AI coding tool reported leaking private code repositoriestechnologycodingdata leakconfirmed
24 Sept 2026Cline Hub Dashboard WebSocket Cross-Origin HijackingClinetechnologyworkflowmisconfigurationconfirmed
24 Sept 2026ServiceNow AI Platform SQL injection vulnerability CVE-2026-13016ServiceNowtechnologyothermisconfigurationresolved
24 Sept 2026Carbonato Malware Uses AI Agents to Hijack Exposed Docker HostsDockertechnologyothermisconfigurationconfirmed
24 Sept 2026AI-Powered Attack Campcampaign Targets Hundreds of Online Retailersretailothertool misuseconfirmed
24 Sept 2026AWS Language Servers arbitrary code execution and file write vulnerabilitiesAWStechnologycodingexcessive permissionsconfirmed
24 Sept 2026Decepticon ChatML injection enables arbitrary command executionPurpleAILABtechnologycodingprompt injectionconfirmed
23 Sept 2026Compromised MemTensor npm/PyPI Packages Deliver sckit StealerMemTensortechnologyothersupply chainconfirmed
23 Sept 2026Attackers Poison AI Chatbot Answers to Spread Phishing and DisinformationOpenAI, Googletechnologybrowsingprompt injectionconfirmed