Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

Symlink vulnerabilities in phi and open-multi-agent frameworks

Two AI agent frameworks contain improper link resolution vulnerabilities allowing attackers to bypass workspace write restrictions through symlink exploitation and prompt injection, enabling unauthorized file writes outside the workspace.

Disclosed 10 October 2026 · Record updated 10 October 2026

Impact

Attackers can bypass sandbox restrictions to write files outside workspace boundaries by combining symlink vulnerabilities with prompt injection attacks on the write tool.

Our coverage

Sources

  1. nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-108599
  2. nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-108600