Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

Vibe-Trading LLM agent multiple critical vulnerabilities

Multiple critical vulnerabilities in Vibe-Trading LLM agent including unauthenticated API access, command injection, arbitrary file read/write, and code injection. An unauthenticated attacker can execute arbitrary commands as root on the server.

Disclosed 2 October 2026 · Record updated 2 October 2026

Impact

Unauthenticated remote attackers can execute arbitrary shell commands as root, read arbitrary server files including credentials, write malicious code files, and perform code injection attacks through multiple vectors including direct API access and prompt injection.

Our coverage

Sources

  1. github.comhttps://github.com/advisories/GHSA-jqmf-mx4f-hfr6
  2. github.comhttps://github.com/advisories/GHSA-5rmq-chc7-m22f
  3. github.comhttps://github.com/advisories/GHSA-v2f8-6655-7grj