Latest
●Mem0 memory keys can be forged to read other tenants' chats●vLLM's wildcard CORS default let any website query local servers●Rust zip crate flaw lets archives hide a second filename●Microsoft says agents in Microsoft 365 grew 15-fold in a year●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials●Functype MCP server flaw let tool calls run arbitrary code●Token Security says blast radius matters more than patch speed●OpenAI agent validated 14 leaked Hugging Face tokens
Thursday, 29 October 2026
0 agent hacks today▼ 6 vs yesterday (6)
The Agentic TimesPowered byVortal

Incident database

Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.

Incidents by month, 2026 · 642 total · click a month to filter
Jan 2026: 23 incidents23JanFeb 2026: 26 incidents26FebMar 2026: 46 incidents46MarApr 2026: 47 incidents47AprMay 2026: 53 incidents53MayJun 2026: 54 incidents54JunJul 2026: 49 incidents49JulAug 2026: 83 incidents83AugSep 2026: 148 incidents148SepOct 2026: 113 incidents113OctNov 2026: 0 incidents0NovDec 2026: 0 incidents0Dec
Incidents by sector · 668 total · click a sector to filter

668 incidents

Incident dateIncidentVendorSectorAgentRoot causeSeverityStatus
2 Sept 2026Multiple DoS vulnerabilities in zhayujie CowAgentzhayujietechnologycodingtool misusereported
2 Sept 2026Omnigent: Multiple Authenticated RCE and Policy Bypass VulnerabilitiesOmnigent (Databricks)technologyotherexcessive permissionsreported
2 Sept 2026CKAN MCP Server: Multiple security vulnerabilities in allowlist and cacheaborrusotechnologyotherprompt injectionreported
2 Sept 2026ntegrals openbrowser Browser Agent Message Construction DoSntegralstechnologybrowsingtool misusereported
2 Sept 2026claude-skill-antivirus fails to analyze executable files in skill directoriesAnthropictechnologycodingtool misusereported
2 Sept 2026OpenChoreo unauthenticated cluster-gateway management API accessOpenChoreotechnologyothermisconfigurationconfirmed
2 Sept 2026SSRF vulnerability in GitHub Enterprise Server Management APIGitHubtechnologyothermisconfigurationresolved
1 Sept 2026Authorization bypass in runZero Platform MCP servicerunZerotechnologyotherexcessive permissionsresolved
1 Sept 2026appium-mcp-server Path Traversal in File Write ToolsAppiumtechnologyothermisconfigurationreported
1 Sept 2026Storm-0940 uses agentic AI tool ARTEX in ConnectWise supply-chain attackConnectWisetechnologyothersupply chainconfirmed
1 Sept 2026Multiple vulnerabilities in NousResearch hermes-agentNousResearchtechnologyworkflowunknownreported
31 Aug 2026Origin validation error in ash_ai MCP server allows DNS rebinding attacksash-projecttechnologyothermisconfigurationconfirmed
31 Aug 2026CVE-2026-82905: SSRF in sdcb chats McpControllersdcbtechnologyothertool misusereported
31 Aug 2026Meta Researcher's AI Agent Accidentally Deleted Her EmailsMetatechnologyotherhallucinated actionreported
28 Aug 2026SiYuan path traversal and path guard bypass vulnerabilitiesSiYuantechnologyotherprompt injectionconfirmed
28 Aug 2026Multiple vulnerabilities in Microsoft Copilot productsMicrosofttechnologyothermisconfigurationreported
28 Aug 2026Hatchet Dispatcher gRPC Service Missing Tenant VerificationHatchettechnologyworkflowmisconfigurationresolved
27 Aug 2026DNS Rebinding Vulnerability in Timescale MCP ToolsTimescaletechnologyothermisconfigurationconfirmed
27 Aug 2026CVE-2026-81093: Apify MCP Server SSRF in get-html-skeleton toolApifytechnologybrowsingexcessive permissionsresolved
27 Aug 2026Dash MCP server DNS rebinding via missing host header validationDropboxtechnologyothermisconfigurationresolved
27 Aug 2026ServiceNow AI platform code injection and SQL injection vulnerabilitiesServiceNowtechnologyotherunknownresolved
27 Aug 2026mcp-router CLI exposed MCP aggregator without authentication by defaultmcp-routertechnologyothermisconfigurationresolved
27 Aug 2026mcp-go HTTP Host header validation vulnerabilitymark3labstechnologyothermisconfigurationresolved
27 Aug 2026CVE-2026-81096: ToolUniverse sandbox escape and unauthenticated RCEToolUniversetechnologycodingexcessive permissionsconfirmed
27 Aug 2026GitLab AI Gateway credential disclosure vulnerabilitiesGitLabtechnologyotherprompt injectionresolved
27 Aug 2026mcp-use Inspector Proxy SSRF via Unvalidated Target URLmcp-usetechnologyothermisconfigurationresolved
27 Aug 2026Nightingale SSRF vulnerability in http_fetch AI-agent toolNightingaletechnologyothermisconfigurationconfirmed
27 Aug 2026Telnyx MCP Server Missing Authentication on HTTP TransportTelnyxtelecomscodingmisconfigurationresolved
27 Aug 2026Agno Remote Code Execution via Prompt InjectionAgnotechnologycodingprompt injectionreported
27 Aug 2026UI-TARS-desktop MCP servers bind to all interfaces without authenticationByteDancetechnologyothermisconfigurationconfirmed
26 Aug 2026CVE-2026-75062: Eval Injection in Google langfunGoogletechnologycodingprompt injectionconfirmed
25 Aug 2026Dradis CE SSRF via unrestricted AI provider addressDradistechnologycodingexcessive permissionsreported
25 Aug 2026MCP PHP SDK Memory Exhaustion VulnerabilityAnthropictechnologyothertool misuseresolved
25 Aug 2026Prompt injection in Amazon Strands Agents Tools python_replAmazontechnologycodingprompt injectionconfirmed
25 Aug 2026Path traversal in sublinear-time-solver and consciousness-explorerruvnettechnologyothermisconfigurationresolved
25 Aug 2026CVE-2026-55529: PraisonAI Origin Validation BypassMervinPraisontechnologyworkflowmisconfigurationresolved
25 Aug 2026CVE-2026-55637: genieacs-mcp DNS rebinding vulnerabilityGeiserXtechnologyothermisconfigurationresolved
25 Aug 2026mcp-shell Multiple Command Execution Vulnerabilitiessoniricotechnologycodingmisconfigurationresolved
25 Aug 2026Nextcloud MCP Server unauthenticated webhook endpoint allows index deletionNextcloudtechnologycodingmisconfigurationresolved
24 Aug 2026Continue CLI incomplete denylist allows destructive commandsContinuetechnologyworkflowprompt injectionreported
21 Aug 2026Infracost symlink traversal and token disclosure vulnerabilitiesInfracosttechnologycodingtool misuseresolved
21 Aug 2026Spring AI MCP Streamable HTTP server memory exhaustion DoSSpringtechnologyothermisconfigurationreported
20 Aug 2026Neo.mjs command injection in FileSystemService.mjsNeo.mjstechnologycodingtool misuseresolved
20 Aug 2026LangChain SitemapLoader SSRF bypass via nested sitemap entriesLangChaintechnologyotherexcessive permissionsreported
20 Aug 2026AI Agent by SiteGround WordPress plugin authorization bypassSiteGroundtechnologycodingexcessive permissionsreported
20 Aug 2026LangBot MCP Server RCE via Insufficient AuthorizationLangBottechnologycodingexcessive permissionsreported
19 Aug 2026marimo Code Injection via MCP Server Configurationmarimo-teamtechnologycodingprompt injectionconfirmed
19 Aug 2026Splunk AI Toolkit privilege escalation and MCP Server command executionSplunktechnologycodingexcessive permissionsreported
19 Aug 2026Agno PythonTools path traversal vulnerability CVE-2026-76832Agnotechnologycodingprompt injectionreported
18 Aug 2026Apify MCP Server API Token Exposure via URL RedirectionApifytechnologycodingprompt injectionresolved