Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.

Incidents by month, 2026 · 582 total · click a month to filter
Jan 2026: 23 incidents23JanFeb 2026: 26 incidents26FebMar 2026: 46 incidents46MarApr 2026: 47 incidents47AprMay 2026: 53 incidents53MayJun 2026: 54 incidents54JunJul 2026: 47 incidents47JulAug 2026: 83 incidents83AugSep 2026: 146 incidents146SepOct 2026: 57 incidents57OctNov 2026: 0 incidents0NovDec 2026: 0 incidents0Dec
Incidents by sector · 606 total · click a sector to filter
Clear

572 incidents match

Incident dateIncidentVendorSectorAgentRoot causeSeverityStatus
4 Sept 2026CodeWhale Multiple Critical Vulnerabilities in v0.8.37-0.8.63CodeWhaletechnologycodingexcessive permissionsconfirmed
3 Sept 2026Broken Access Control in Agentimus AI SEO PluginAgentimustechnologyotherexcessive permissionsreported
3 Sept 2026agent-squad Resource Exhaustion Vulnerability in Streaming2FastLabstechnologyworkflowtool misusereported
3 Sept 2026Multiple vulnerabilities in n8n workflow automation platformn8ntechnologyworkflowtool misuseconfirmed
3 Sept 2026KP Agent Ready sensitive data insertion vulnerabilityKevin Pirnietechnologyotherdata leakreported
3 Sept 2026Missing Authorization in MountDev AI MCP Connector for WordPressCascadia Web Servicestechnologyotherexcessive permissionsreported
3 Sept 2026Multiple vulnerabilities in simular-ai Agent-Ssimular-aitechnologyothertool misusereported
3 Sept 2026CKAN MCP Server: Information disclosure via verbose error reflectionaborrusotechnologyotherdata leakreported
3 Sept 2026Cheshire Cat AI memory endpoint lacks per-user filteringCheshire Cat AItechnologyotherexcessive permissionsreported
3 Sept 2026Orval: Multiple RCE vulnerabilities in code generationOrvaltechnologycodingprompt injectionreported
3 Sept 2026SSRF vulnerability in unstructured library URL handlingunstructuredtechnologyothermisconfigurationreported
3 Sept 2026Helicone vault key exposure via inadequate org validationHeliconetechnologyothermisconfigurationreported
3 Sept 2026Hermes Agent RCE via malicious .git/configHermestechnologycodingtool misuseresolved
3 Sept 2026Langgenius Dify XSS via redirect_url parameter in Splash LayoutLanggeniustechnologyotherprompt injectionreported
2 Sept 2026ntegrals openbrowser Browser Agent Message Construction DoSntegralstechnologybrowsingtool misusereported
2 Sept 2026CKAN MCP Server: Multiple security vulnerabilities in allowlist and cacheaborrusotechnologyotherprompt injectionreported
2 Sept 2026claude-skill-antivirus fails to analyze executable files in skill directoriesAnthropictechnologycodingtool misusereported
2 Sept 2026OpenChoreo unauthenticated cluster-gateway management API accessOpenChoreotechnologyothermisconfigurationconfirmed
2 Sept 2026Multiple DoS vulnerabilities in zhayujie CowAgentzhayujietechnologycodingtool misusereported
2 Sept 2026SSRF vulnerability in GitHub Enterprise Server Management APIGitHubtechnologyothermisconfigurationresolved
2 Sept 2026Omnigent: Multiple Authenticated RCE and Policy Bypass VulnerabilitiesOmnigent (Databricks)technologyotherexcessive permissionsreported
1 Sept 2026Multiple vulnerabilities in NousResearch hermes-agentNousResearchtechnologyworkflowunknownreported
1 Sept 2026appium-mcp-server Path Traversal in File Write ToolsAppiumtechnologyothermisconfigurationreported
1 Sept 2026Authorization bypass in runZero Platform MCP servicerunZerotechnologyotherexcessive permissionsresolved
31 Aug 2026Meta Researcher's AI Agent Accidentally Deleted Her EmailsMetatechnologyotherhallucinated actionreported
31 Aug 2026Origin validation error in ash_ai MCP server allows DNS rebinding attacksash-projecttechnologyothermisconfigurationconfirmed
31 Aug 2026CVE-2026-82905: SSRF in sdcb chats McpControllersdcbtechnologyothertool misusereported
28 Aug 2026SiYuan path traversal and path guard bypass vulnerabilitiesSiYuantechnologyotherprompt injectionconfirmed
28 Aug 2026Hatchet Dispatcher gRPC Service Missing Tenant VerificationHatchettechnologyworkflowmisconfigurationresolved
28 Aug 2026Multiple vulnerabilities in Microsoft Copilot productsMicrosofttechnologyothermisconfigurationreported
27 Aug 2026Nightingale SSRF vulnerability in http_fetch AI-agent toolNightingaletechnologyothermisconfigurationconfirmed
27 Aug 2026CVE-2026-81093: Apify MCP Server SSRF in get-html-skeleton toolApifytechnologybrowsingexcessive permissionsresolved
27 Aug 2026CVE-2026-81096: ToolUniverse sandbox escape and unauthenticated RCEToolUniversetechnologycodingexcessive permissionsconfirmed
27 Aug 2026DNS Rebinding Vulnerability in Timescale MCP ToolsTimescaletechnologyothermisconfigurationconfirmed
27 Aug 2026GitLab AI Gateway credential disclosure vulnerabilitiesGitLabtechnologyotherprompt injectionresolved
27 Aug 2026mcp-go HTTP Host header validation vulnerabilitymark3labstechnologyothermisconfigurationresolved
27 Aug 2026mcp-router CLI exposed MCP aggregator without authentication by defaultmcp-routertechnologyothermisconfigurationresolved
27 Aug 2026mcp-use Inspector Proxy SSRF via Unvalidated Target URLmcp-usetechnologyothermisconfigurationresolved
27 Aug 2026Dash MCP server DNS rebinding via missing host header validationDropboxtechnologyothermisconfigurationresolved
27 Aug 2026UI-TARS-desktop MCP servers bind to all interfaces without authenticationByteDancetechnologyothermisconfigurationconfirmed
27 Aug 2026Agno Remote Code Execution via Prompt InjectionAgnotechnologycodingprompt injectionreported
27 Aug 2026ServiceNow AI platform code injection and SQL injection vulnerabilitiesServiceNowtechnologyotherunknownresolved
26 Aug 2026CVE-2026-75062: Eval Injection in Google langfunGoogletechnologycodingprompt injectionconfirmed
25 Aug 2026Dradis CE SSRF via unrestricted AI provider addressDradistechnologycodingexcessive permissionsreported
25 Aug 2026MCP PHP SDK Memory Exhaustion VulnerabilityAnthropictechnologyothertool misuseresolved
25 Aug 2026Path traversal in sublinear-time-solver and consciousness-explorerruvnettechnologyothermisconfigurationresolved
25 Aug 2026Prompt injection in Amazon Strands Agents Tools python_replAmazontechnologycodingprompt injectionconfirmed
25 Aug 2026CVE-2026-55529: PraisonAI Origin Validation BypassMervinPraisontechnologyworkflowmisconfigurationresolved
25 Aug 2026Nextcloud MCP Server unauthenticated webhook endpoint allows index deletionNextcloudtechnologycodingmisconfigurationresolved
25 Aug 2026mcp-shell Multiple Command Execution Vulnerabilitiessoniricotechnologycodingmisconfigurationresolved