Latest
●Fake job interview preceded $6.3bn Binance crypto theft●WorkOS says attacker used ARTEX AI to breach sales app●Think tank warns of self-sustaining 'sovereign agents'●Path traversal in Praktor lets Telegram users plant agent orders●Stolen cloud keys fuel a resale market for LLM access●CrowdStrike to Buy AI Security Firms Fiddler and Dreadnode●NCSC warns AI-powered ransomware will hit UK infrastructure by 2028●Chinese hackers used open-source ARTEX AI to attack 200 organisations
Wednesday, 4 November 2026
0 agent hacks today▼ 4 vs yesterday (4)
The Agentic TimesPowered byVortal

Incident database

Praktor path traversal allows instruction injection via Telegram uploads

A path traversal vulnerability in Praktor's Telegram bot integration allows remote users to write files outside the uploads directory and inject malicious instructions into Claude agent workspaces. The vulnerability affects versions through v0.9.0 and is patched in v0.9.1.

Disclosed 3 November 2026 · Record updated 3 November 2026

Impact

Remote attackers can escape the uploads directory and write arbitrary files to agent workspace volumes, including agent instruction files, enabling stored instruction injection attacks on Claude agents.

Our coverage

Sources

  1. github.comhttps://github.com/advisories/GHSA-48v2-6jcm-fc99