| 3 Aug 2026 | CVE-2026-18655: Amazon MQ MCP Server prompt injection vulnerability | Amazon Web Services | technology | coding | prompt injection | | confirmed |
| 3 Aug 2026 | Ouroboros AI coding agent local code execution via .env loading | Q00 | technology | coding | misconfiguration | | resolved |
| 2 Aug 2026 | CVE-2026-67357: ArcadeDB MCP information disclosure vulnerability | ArcadeDB | technology | other | data leak | | confirmed |
| 1 Aug 2026 | better-auth redirect URI validation bypass enables XSS | better-auth | technology | other | misconfiguration | | reported |
| 31 Jul 2026 | CVE-2026-18394: Incorrect authorization in Strands Agents Tools http_request | Strands | technology | other | excessive permissions | | confirmed |
| 29 Jul 2026 | Flyto2 Core SSRF vulnerability in HTTP modules | Flyto | technology | workflow | misconfiguration | | confirmed |
| 29 Jul 2026 | MCP Ruby SDK Multiple Vulnerabilities Prior to 0.23.0 | Anthropic | technology | other | misconfiguration | | resolved |
| 29 Jul 2026 | MCP Ruby SDK memory exhaustion via unbounded session objects | Anthropic | technology | other | misconfiguration | | resolved |
| 29 Jul 2026 | Pydantic AI Multiple Vulnerabilities in Versions 1.56.0-2.0.0b5 | Pydantic | technology | workflow | excessive permissions | | resolved |
| 28 Jul 2026 | CVE-2026-9680: Alibabacloud RDS OpenAPI MCP Server Exposed | Alibaba Cloud | technology | other | misconfiguration | | reported |
| 28 Jul 2026 | GitHub MCP Server nil pointer dereference denial of service | GitHub | technology | other | misconfiguration | | resolved |
| 27 Jul 2026 | CVE-2026-17534: Kimi Code SSRF via DNS resolution bypass | Moonshot AI | technology | coding | prompt injection | | resolved |
| 26 Jul 2026 | CVE-2026-17433: Improper authorization in nanocoai NanoClaw | nanocoai | technology | other | excessive permissions | | reported |
| 25 Jul 2026 | CVE-2026-66012: SiYuan Missing Authorization in MCP Kernel Endpoint | SiYuan | technology | other | excessive permissions | | confirmed |
| 25 Jul 2026 | Researchers used Claude to hack OpenAI employees' ChatGPT accounts | OpenAI | technology | coding | misconfiguration | | resolved |
| 24 Jul 2026 | Suna message queue API broken access control vulnerability | Kortix AI | technology | other | excessive permissions | | confirmed |
| 24 Jul 2026 | BlenderMCP path traversal vulnerability in download_polyhaven_asset | BlenderMCP | technology | coding | prompt injection | | confirmed |
| 24 Jul 2026 | CVE-2026-50517: Unsafe deserialization in M365 Copilot | Microsoft | technology | other | tool misuse | | reported |
| 24 Jul 2026 | Jan Local API Server CORS Misconfiguration (CVE-2026-66005) | Jan | technology | other | misconfiguration | | resolved |
| 23 Jul 2026 | AgentGPT authorization bypass allows unauthorized task attachment | AgentGPT | technology | workflow | excessive permissions | | reported |
| 23 Jul 2026 | APIFold webhook endpoint accepts unauthenticated arbitrary JSON | APIFold | technology | other | misconfiguration | | resolved |
| 23 Jul 2026 | Void path traversal in AI agent file-reading tools | Void | technology | coding | prompt injection | | reported |
| 22 Jul 2026 | Path traversal in Ansible Lightspeed MCP server via prompt injection | Red Hat | technology | coding | prompt injection | | reported |
| 22 Jul 2026 | n8n privilege escalation and OAuth authorization vulnerabilities | n8n | technology | other | excessive permissions | | confirmed |
| 21 Jul 2026 | mcp-webresearch 0.1.7 SSRF vulnerability via LLM prompt injection | mcp-webresearch | technology | browsing | prompt injection | | reported |
| 21 Jul 2026 | MCP-for-Stata Command Injection via log_file_name Parameter | SepineTam | technology | coding | prompt injection | | confirmed |
| 20 Jul 2026 | nono Sandbox Escape via Unix Domain Socket Access | nolabs | technology | other | misconfiguration | | resolved |
| 20 Jul 2026 | NextCRM MCP API Missing Role Checks in Product Operations | NextCRM | technology | coding | excessive permissions | | confirmed |
| 20 Jul 2026 | AgenticMail Multiple Vulnerabilities Allowing Agent Impersonation and Prompt Injection | AgenticMail | technology | coding | prompt injection | | resolved |
| 20 Jul 2026 | Network-AI MCP SSE Server Missing Authentication | Network-AI | technology | other | misconfiguration | | confirmed |
| 17 Jul 2026 | IBM Langflow OSS code injection via ToolGuard integration | IBM | technology | workflow | excessive permissions | | reported |
| 17 Jul 2026 | ForgeCode automatically executes arbitrary commands from malicious .mcp.json | tailcallhq | technology | coding | misconfiguration | | reported |
| 17 Jul 2026 | AI Copilot WordPress plugin OAuth token binding vulnerability | AI Copilot | technology | other | misconfiguration | | reported |
| 17 Jul 2026 | CVE-2026-58195: Agentic-Flow Command Injection via MCP Server Tools | ruvnet | technology | workflow | tool misuse | | resolved |
| 16 Jul 2026 | Claude Code Action arbitrary code execution via malicious .mcp.json | Anthropic | technology | coding | misconfiguration | | resolved |
| 16 Jul 2026 | dbt-mcp argument injection and data leak vulnerabilities | dbt Labs | technology | workflow | excessive permissions | | resolved |
| 16 Jul 2026 | Apify MCP Server URL Validation Bypass | Apify | technology | other | misconfiguration | | resolved |
| 9 Jul 2026 | n8n and n8n-MCP flaws expose credentials and cross-tenant workflow backups | n8n | technology | workflow | excessive permissions | | resolved |
| 9 Jul 2026 | CVE-2026-15189: SSRF in aerostack-mcp WhatsApp MCP upload_media tool | aerostackdev | technology | workflow | tool misuse | | reported |
| 8 Jul 2026 | CVE-2026-59807: Composio SDK path validation bypass enables credential file exfiltration | Composio | technology | workflow | prompt injection | | resolved |
| 8 Jul 2026 | Researchers trick GitHub's AI coding agent into leaking private repositories | GitHub | technology | coding | prompt injection | | reported |
| 8 Jul 2026 | LiteLLM MCP endpoint authentication bypass via forged Authorization header (CVE-2026-59822) | BerriAI | technology | other | excessive permissions | | resolved |
| 8 Jul 2026 | CVE-2026-59723: Cline Hub dashboard WebSocket flaw allows remote command execution | Cline | technology | coding | misconfiguration | | resolved |
| 6 Jul 2026 | CVE-2026-14898: Codex macOS app image rendering enables prompt-injection data exfiltration | OpenAI | technology | coding | prompt injection | | reported |
| 6 Jul 2026 | CVE-2026-44934: SUSE Rancher AI Agent leaks API keys in DEBUG logs | SUSE | technology | workflow | data leak | | resolved |
| 5 Jul 2026 | CVE-2026-14742: Weak hash in LangGraph task result cache key | langchain-ai | technology | workflow | unknown | | reported |
| 5 Jul 2026 | SSRF in AIAnytime Awesome-MCP-Server wiki-summary tool (CVE-2026-14748) | AIAnytime | technology | workflow | tool misuse | | reported |
| 3 Jul 2026 | CVE-2026-13341: Indirect prompt injection in Kong Konnect MCP server | Kong | technology | workflow | prompt injection | | resolved |
| 2 Jul 2026 | CVE-2026-41106: Open redirect in M365 Copilot enables privilege elevation | Microsoft | technology | workflow | misconfiguration | | confirmed |
| 2 Jul 2026 | fast-mcp-telegram MCP server auth bypass via path traversal in bearer token (CVE-2026-52830) | leshchenko1979 | technology | other | excessive permissions | | resolved |
