Latest
●Mem0 memory keys can be forged to read other tenants' chats●vLLM's wildcard CORS default let any website query local servers●Rust zip crate flaw lets archives hide a second filename●Microsoft says agents in Microsoft 365 grew 15-fold in a year●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials●Functype MCP server flaw let tool calls run arbitrary code●Token Security says blast radius matters more than patch speed●OpenAI agent validated 14 leaked Hugging Face tokens
Thursday, 29 October 2026
0 agent hacks today▼ 6 vs yesterday (6)
The Agentic TimesPowered byVortal

Incident database

Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.

Incidents by month, 2026 · 642 total · click a month to filter
Jan 2026: 23 incidents23JanFeb 2026: 26 incidents26FebMar 2026: 46 incidents46MarApr 2026: 47 incidents47AprMay 2026: 53 incidents53MayJun 2026: 54 incidents54JunJul 2026: 49 incidents49JulAug 2026: 83 incidents83AugSep 2026: 148 incidents148SepOct 2026: 113 incidents113OctNov 2026: 0 incidents0NovDec 2026: 0 incidents0Dec
Incidents by sector · 668 total · click a sector to filter

668 incidents

Incident dateIncidentVendorSectorAgentRoot causeSeverityStatus
10 Sept 2026OmniRoute RCE via unauthenticated POST /api/acp/agents endpointOmniRoutetechnologyotherexcessive permissionsconfirmed
10 Sept 2026Command injection in Tianxi AI Agent PC ApplicationLenovotechnologyothertool misuseconfirmed
10 Sept 2026AWS Security Agent MCP Server S3 Bucket Ownership Verification MissingAWStechnologyothermisconfigurationconfirmed
10 Sept 2026Crook used open-source AI agents to breach 27+ companies, steal 600k cardstechnologyothertool misuseconfirmed
10 Sept 2026Path Injection in n8n Elasticsearch and ElasticSecurity Nodesn8ntechnologyworkflowtool misuseresolved
10 Sept 2026n8n Multiple Vulnerabilities in Workflow Execution and Access Controln8ntechnologyworkflowmisconfigurationconfirmed
9 Sept 2026functype-mcp-server RCE via unsanitized pnpm installfunctype-mcp-servertechnologyworkflowprompt injectionconfirmed
9 Sept 2026Open WebUI vulnerabilities allow DoS and message tamperingOpen WebUItechnologyothermisconfigurationresolved
8 Sept 2026Command injection and credential exposure in GitHub Copilot and Visual Studio CodeMicrosofttechnologycodingprompt injectionconfirmed
8 Sept 2026Roo-Code auto-approve bypass vulnerabilities in shell command parsingRoo-Codetechnologycodingexcessive permissionsconfirmed
8 Sept 2026ASUS Control Center Express Agent missing authentication vulnerabilityASUStechnologyothermisconfigurationconfirmed
8 Sept 2026Covert channel in ChatGPT's internal Artifactory enabled cross-account Gmail data theftOpenAItechnologyotherprompt injectionresolved
8 Sept 2026Okta Hyperdrive agent plugin authentication and logging vulnerabilitiesOktatechnologyothermisconfigurationconfirmed
7 Sept 2026Eclipse Ankaios wildcard authorization bypass in Control InterfaceEclipse Ankaiostechnologyothermisconfigurationconfirmed
7 Sept 2026knowns path traversal vulnerabilities in MCP tool argumentsknowns-devtechnologycodingtool misuseconfirmed
5 Sept 2026Rowboat fails to validate custom MCP server and webhook URLsRowboat Labstechnologyworkflowmisconfigurationreported
5 Sept 2026Teen researcher found Microsoft Titan auth flaw exposing 17.3 trillion rowsMicrosofttechnologycodingmisconfigurationresolved
5 Sept 2026AVideo API rate limit bypass via bot User-Agent headerAVideotechnologyothermisconfigurationreported
4 Sept 2026ms-swift 4.5.2 SSRF via unvalidated media URLsms-swifttechnologycodingtool misusereported
4 Sept 2026Xinference unauthenticated arbitrary-path file read vulnerabilityXinferencetechnologyotherexcessive permissionsreported
4 Sept 2026OGX Unauthenticated Server-Side Request Forgery via MCP ToolOGXtechnologyotherexcessive permissionsreported
4 Sept 2026Multiple vulnerabilities in IBM ContextForge and Langflow OSSIBMtechnologyotherexcessive permissionsreported
4 Sept 2026git-mcp-server argument injection in git toolsgit-mcp-servertechnologycodingprompt injectionreported
4 Sept 2026Arbitrary local file read in firecrawl-mcp-server 3.20.2firecrawltechnologycodingexcessive permissionsreported
4 Sept 2026Multiple vulnerabilities in Amazon AWS Labs MCP serversAmazontechnologyworkflowprompt injectionconfirmed
4 Sept 2026LaVague 0.2.35 Remote Code Execution via Prompt InjectionLaVaguetechnologycodingprompt injectionreported
4 Sept 2026CodeWhale SSRF bypass via DNS pinning TOCTOUCodeWhaletechnologybrowsingtool misuseconfirmed
4 Sept 2026Aider arbitrary code execution via malicious .aider.conf.ymlaider-chattechnologycodingmisconfigurationreported
4 Sept 2026LobeChat webhook signature verification bypass in QQ and Feishu adaptersLobeHubtechnologyworkflowmisconfigurationreported
4 Sept 2026SSRF vulnerability in OWL DocumentProcessingToolkitOWLtechnologyotherprompt injectionconfirmed
4 Sept 2026excel-mcp-server path confinement bypass in stdio modeexcel-mcp-servertechnologyothermisconfigurationreported
4 Sept 2026Postgres MCP Pro 0.3.0 restricted-mode bypass via RangeFunctionPostgres MCP Protechnologycodingmisconfigurationreported
4 Sept 2026LLaMA-Factory SSRF vulnerability in OpenAI API handlerLLaMA-Factorytechnologycodingmisconfigurationreported
4 Sept 2026AgentScope path traversal vulnerability in LocalWorkspace.add_skillAgentScopetechnologyworkflowexcessive permissionsreported
4 Sept 2026xiaobei webhook endpoint lacks authentication, allows SSRF attacksxiaobeitechnologyworkflowmisconfigurationreported
4 Sept 2026cli-mcp-server command allowlist bypass via shell operatorscli-mcp-servertechnologycodingmisconfigurationreported
4 Sept 2026CodeWhale Multiple Critical Vulnerabilities in v0.8.37-0.8.63CodeWhaletechnologycodingexcessive permissionsconfirmed
3 Sept 2026KP Agent Ready sensitive data insertion vulnerabilityKevin Pirnietechnologyotherdata leakreported
3 Sept 2026Broken Access Control in Agentimus AI SEO PluginAgentimustechnologyotherexcessive permissionsreported
3 Sept 2026Hermes Agent RCE via malicious .git/configHermestechnologycodingtool misuseresolved
3 Sept 2026SSRF vulnerability in unstructured library URL handlingunstructuredtechnologyothermisconfigurationreported
3 Sept 2026Multiple vulnerabilities in n8n workflow automation platformn8ntechnologyworkflowtool misuseconfirmed
3 Sept 2026Orval: Multiple RCE vulnerabilities in code generationOrvaltechnologycodingprompt injectionreported
3 Sept 2026Missing Authorization in MountDev AI MCP Connector for WordPressCascadia Web Servicestechnologyotherexcessive permissionsreported
3 Sept 2026Helicone vault key exposure via inadequate org validationHeliconetechnologyothermisconfigurationreported
3 Sept 2026CKAN MCP Server: Information disclosure via verbose error reflectionaborrusotechnologyotherdata leakreported
3 Sept 2026Cheshire Cat AI memory endpoint lacks per-user filteringCheshire Cat AItechnologyotherexcessive permissionsreported
3 Sept 2026agent-squad Resource Exhaustion Vulnerability in Streaming2FastLabstechnologyworkflowtool misusereported
3 Sept 2026Multiple vulnerabilities in simular-ai Agent-Ssimular-aitechnologyothertool misusereported
3 Sept 2026Langgenius Dify XSS via redirect_url parameter in Splash LayoutLanggeniustechnologyotherprompt injectionreported