Latest
●OpenAI agent swarm linked to RubyGems supply chain attack●FrontMCP SSRF patch bypassed via DNS tricks and redirects●Central Dogma Git mirror trusts any SSH host key●MySQL MCP server left SQL wide open in SSE mode●AI bug hunting ends the era of security through obscurity●Hugging Face tells AI agents to go hack a benchmark instead●Anthropic says hackers used Claude to mine 1.8M Android apps●Anthropic says Claude was abused to automate attacks and weapons work
Sunday, 13 September 2026
8 agent hacks today▲ 7 vs yesterday (1)
The Agentic TimesPowered byVortal

Incident database

LangChain SSRF flaws in ChatOpenAI token counter and RecursiveUrlLoader

Two server-side request forgery vulnerabilities were disclosed in LangChain: ChatOpenAI.get_num_tokens_from_messages() fetched arbitrary image_url values without validation (CVE-2026-26013), and the @langchain/community RecursiveUrlLoader used a string-prefix check for its preventOutside option and did not block private or reserved IP addresses, allowing crawls of internal infrastructure and cloud metadata services (CVE-2026-26019). Both were fixed in langchain-core 1.2.11 and @langchain/community 1.1.14 respectively.

Disclosed 10 February 2026 · Record updated 13 September 2026

Impact

Attacker-supplied image URLs or crawled page links could cause the framework to issue requests to attacker-controlled or internal endpoints, including localhost, RFC 1918 addresses and cloud metadata services.

Our coverage

No articles linked to this incident yet.

Sources

  1. nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-26013
  2. nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-26019