Latest

●Mem0 memory keys can be forged to read other tenants' chats ●vLLM's wildcard CORS default let any website query local servers ●Rust zip crate flaw lets archives hide a second filename ●Microsoft says agents in Microsoft 365 grew 15-fold in a year ●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials ●Functype MCP server flaw let tool calls run arbitrary code ●Token Security says blast radius matters more than patch speed ●OpenAI agent validated 14 leaked Hugging Face tokens

Thursday, 29 October 2026

0 agent hacks today▼ 6 vs yesterday (6)

The Agentic Times Powered by

Latest

A puppet master's strings redirect a butler carrying golden keys toward a shadowed doorway instead of the master's study.

Vulnerabilities

Contentful MCP server flaw let prompt injection steal API tokens

A fixed vulnerability in Contentful's Model Context Protocol server allowed AI-controlled tool arguments to redirect management API calls, and their credentials, to attacker hosts.

15 Sept 2026

DigiCert pitches DNS and certificates as agent governance tools

DigiCert pitches DNS and certificates as agent governance tools

A sponsored white paper published on 15 September 2026 sets out five governance questions and proposes DNS policy records, workload identity and an "AI Agent Passport".

15 Sept 2026

Trail of Bits disputes 1Password's 26% AI patching figure

Trail of Bits disputes 1Password's 26% AI patching figure

Security firm says the benchmark mixed in trials where agents were told to apply the wrong fix and were barred from testing their code.

15 Sept 2026

A locked vault door stands half-open, revealing defensive tools on one side while attack weapons remain sealed behind reinforced glass on the other.

Microsoft code of conduct draws line on AI cyberattack capability

The company's Humanist AI Code of Conduct separates defensive security research from operational attack capability, and adds chain-of-command and safety constraints.

15 Sept 2026

A vault's heavy iron door swings open unguarded after its lock mechanism is quietly renamed, exposing shadowy corridors within.

Vulnerabilities

ESPHome dashboard lost its password after env var rename

An advisory published on 14 September 2026 says upgraded ESPHome Device Builder instances that used the old USERNAME and PASSWORD variables started up with no authentication at all.

14 Sept 2026

Weekly roundup warns of AI agents crossing the line

Weekly roundup warns of AI agents crossing the line

A 14 September 2026 security recap from The Hacker News says attackers are automating more of their work with AI, and that some models are misbehaving on their own.

14 Sept 2026

A marionette puppet with tangled strings suddenly jerks rigid as unseen hands yank invisible threads, forcing its wooden limbs to execute commands against its painted will.

Vulnerabilities

Lenovo reports command injection flaw in Tianxi AI Agent PC app

CVE-2026-19136 could let a crafted link run operating system commands on machines where the agent software handles it.

14 Sept 2026

A fortress wall cracks open as unseen hands reach through the gaps, extracting glowing data streams while guards stand unaware at distant posts.

Vulnerabilities

Two CVEs hit GitHub Copilot and Visual Studio Code

Microsoft's coding assistant and editor carry flaws that let an unauthorised attacker disclose information over a network, according to entries published by the US vulnerability database.

14 Sept 2026

A thief plucks a glowing token from midair, inserts it into a locked door, and walks straight through as the rightful owner.

Vulnerabilities

MCPHub OAuth flaw lets attackers swap codes for tokens

A vulnerability disclosed on 12 September 2026 lets anyone holding an intercepted authorization code take over MCPHub accounts without a client secret.

14 Sept 2026

A network of pipes suddenly branches at unmarked junctions, with water streams diverted down unexpected passages toward locked administrative chambers instead of their intended destinations.

Vulnerabilities

n8n patches path injection in its Elasticsearch nodes

A flaw disclosed on 10 September 2026 let crafted identifiers redirect n8n workflow requests to other indices or cluster admin endpoints.

14 Sept 2026

A factory worker pulls three different levers simultaneously, causing the entire assembly line to jam and grind to a halt while frozen gears smoke.

Vulnerabilities

Three Open WebUI flaws let any user freeze the server

Advisories published on 9 and 10 September 2026 describe denial-of-service bugs and a message-tampering flaw, all fixed in version 0.11.1.

14 Sept 2026

A guard stands at a vast library's entrance, their checklist beginning with a blank asterisk, waving through every visitor who approaches without questioning what they're actually permitted to access inside.

Vulnerabilities

Wildcard rule flaw lets Ankaios workloads read full cluster state

An advisory published on 7 September 2026 says Eclipse Ankaios wrongly authorises empty field masks when an allow rule starts with a wildcard.

14 Sept 2026

A robot's mechanical arm reaches beyond an invisible fence, fingers stretching through layered walls to pluck documents from deep inside a locked archive.

Vulnerabilities

Path traversal flaws in knowns let AI agents read any file

Three CVEs disclosed in September 2026 show the developer tool failed to keep MCP tool arguments inside the project directory.

14 Sept 2026

A lock-picker slips past an unguarded gate, plants fake mailboxes in a warehouse, then intercepts packages containing blueprints and keys meant for the owner.

Vulnerabilities

AWS patches S3 bucket flaw in Security Agent MCP server

A missing ownership check let attackers pre-register scan output buckets and collect private source archives, credentials and infrastructure state.

14 Sept 2026

A factory worker hands an unmarked package directly to a machine without inspection, and it automatically unpacks and executes whatever's inside the sealed box.

Vulnerabilities

MCP tool in functype-mcp-server allows remote code execution

A version string passed straight to pnpm lets anyone who can call the tool install and run arbitrary code inside the MCP server process.

14 Sept 2026

A robot's gatekeeper nods at forged documents, waving through locked boxes marked "denied" as invisible hands slip past the barrier unnoticed.

Vulnerabilities

Two auto-approve bypasses found in Roo-Code coding agent

Advisories published on 8 September 2026 describe parser flaws that let denied shell commands slip past Roo-Code's approval gate and run automatically.

14 Sept 2026

A automated mail-sorting machine accepts envelopes without checking sender identity, while another identical machine carelessly drops sensitive letters onto the floor below.

Vulnerabilities

Two flaws disclosed in Okta's Hyperdrive agent plugin

Advisories published on 8 September 2026 describe an unverifiable authentication response and a live bearer credential written to local logs.

14 Sept 2026

A worker stands inside a transparent glass box labeled "trusted user," hand reaching through to manipulate invisible puppet strings controlling a massive machine's gears and levers.

Vulnerabilities

Five flaws disclosed in IBM Langflow OSS agent builder

Advisories published on 11 September 2026 describe authenticated users running arbitrary Python and OS commands in Langflow versions 1.0.0 to 1.11.5.

14 Sept 2026

A factory assembly line freezes mid-motion while unauthorized hands slip past security barriers, glimpsing blueprints meant for others.

Vulnerabilities

Five flaws patched in n8n workflow automation platform

Advisories published on 10 September 2026 describe bugs that let users freeze n8n instances, bypass approval gates and see other people's workflow IDs.

14 Sept 2026

A figure reaches through an open door into a control room, hands grasping at levers and switches while the rightful operator sits unaware at their station.

Vulnerabilities

ASUS agent flaw lets nearby users take over logged-in hosts

A missing authentication check in ASUS Control Center Express Agent allows control of a machine over a direct connection while a user is signed in.

14 Sept 2026