https://theagentictimes.org hourly 1 https://theagentictimes.org/incidents daily 0.6 https://theagentictimes.org/database daily 0.6 https://theagentictimes.org/ann daily 0.6 https://theagentictimes.org/about daily 0.6 https://theagentictimes.org/editorial-policy daily 0.6 https://theagentictimes.org/corrections daily 0.6 https://theagentictimes.org/contact daily 0.6 https://theagentictimes.org/vulnerabilities daily 0.7 https://theagentictimes.org/regulation daily 0.7 https://theagentictimes.org/vendors daily 0.7 https://theagentictimes.org/explainers daily 0.7 https://theagentictimes.org/vulnerabilities/gemini-cli-readme-attack 2026-09-15T11:15:11.782064+00:00 0.8 https://theagentictimes.org/incidents/amazon-q-extension-wiper-instruction 2026-09-15T11:15:50.244801+00:00 0.8 https://theagentictimes.org/incidents/ai-agent-used-to-breach-dutch-vulnerability-disclosure-nonprofit 2026-09-29T16:41:02.235017+00:00 0.8 https://theagentictimes.org/vulnerabilities/fake-pageant-agent-can-crash-russh-ssh-clients-on-windows 2026-09-30T23:58:30.768608+00:00 0.8 https://theagentictimes.org/vulnerabilities/esphome-dashboard-lost-its-password-after-env-var-rename 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/trigger-dev-webhook-alerts-can-be-aimed-at-internal-servers 2026-10-02T23:52:22.277889+00:00 0.8 https://theagentictimes.org/incidents/openai-says-its-agents-interacted-with-us-government-websites 2026-10-05T17:28:57.643058+00:00 0.8 https://theagentictimes.org/incidents/south-korean-officials-link-bank-breaches-to-ai-hacking-tool 2026-10-06T21:06:47.226282+00:00 0.8 https://theagentictimes.org/incidents/nx-s1ngularity-ai-agents-hunt-secrets 2026-09-15T11:12:38.344363+00:00 0.8 https://theagentictimes.org/vulnerabilities/hidden-channel-in-chatgpts-package-server-leaked-gmail-data 2026-09-15T11:09:50.913332+00:00 0.8 https://theagentictimes.org/vulnerabilities/forcedleak-agentforce-web-to-lead 2026-09-15T11:11:54.598681+00:00 0.8 https://theagentictimes.org/vulnerabilities/wildcard-rule-flaw-lets-ankaios-workloads-read-full-cluster-state 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/incidents/ai-coding-agents-dumped-13-000-private-screenshots-on-github 2026-09-29T16:40:23.010337+00:00 0.8 https://theagentictimes.org/vendors/gitguardian-pitches-credential-sprawl-as-an-ai-agent-problem 2026-10-05T14:52:39.235275+00:00 0.8 https://theagentictimes.org/vulnerabilities/two-auto-approve-bypasses-found-in-roo-code-coding-agent 2026-09-15T11:08:14.168876+00:00 0.8 https://theagentictimes.org/incidents/anthropic-espionage-campaign-claude-code 2026-09-15T11:11:15.317285+00:00 0.8 https://theagentictimes.org/vulnerabilities/prompt-injection-flaw-reported-in-metas-open-genai-stack 2026-09-29T16:39:41.151255+00:00 0.8 https://theagentictimes.org/vulnerabilities/wordpress-ai-plugin-flaw-lets-attackers-hijack-admin-dashboard 2026-10-01T06:04:04.367482+00:00 0.8 https://theagentictimes.org/vulnerabilities/shadowleak-deep-research-gmail 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/three-open-webui-flaws-let-any-user-freeze-the-server 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/explainers/vendor-guide-warns-ai-agents-can-outrun-their-own-permissions 2026-10-09T17:06:36.574325+00:00 0.8 https://theagentictimes.org/vulnerabilities/unit-42-releases-tool-to-audit-kubernetes-operator-privileges 2026-09-29T16:42:18.609106+00:00 0.8 https://theagentictimes.org/incidents/gemini-calendar-invite-smart-home 2026-09-15T11:14:34.15311+00:00 0.8 https://theagentictimes.org/vulnerabilities/asus-agent-flaw-lets-nearby-users-take-over-logged-in-hosts 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/mcp-inspector-browser-rce 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/n8n-patches-path-injection-in-its-elasticsearch-nodes 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/incidents/spains-data-watchdog-logs-first-ai-agent-breach-report 2026-09-18T02:08:51.384536+00:00 0.8 https://theagentictimes.org/incidents/closedquorum-malware-asks-ai-models-what-to-do-next 2026-09-24T00:52:37.152019+00:00 0.8 https://theagentictimes.org/vulnerabilities/agent-built-tools-uncover-signature-forgery-bug-in-miden-zkvm 2026-09-21T00:11:35.425416+00:00 0.8 https://theagentictimes.org/vulnerabilities/unit-42-finds-credential-leak-path-in-aws-agentcore-harness 2026-09-20T03:02:20.149606+00:00 0.8 https://theagentictimes.org/vulnerabilities/rapid7-patches-graphql-injection-flaw-in-bulk-export-mcp-server 2026-09-27T02:49:34.413285+00:00 0.8 https://theagentictimes.org/vulnerabilities/ollama-patches-command-approval-bypass-in-agent-mode 2026-09-29T22:23:16.148726+00:00 0.8 https://theagentictimes.org/vulnerabilities/five-flaws-patched-in-n8n-workflow-automation-platform 2026-09-16T08:51:34.061624+00:00 0.8 https://theagentictimes.org/explainers/snyk-warns-ai-coding-agents-keep-shipping-broken-access-control 2026-10-01T13:28:29.955571+00:00 0.8 https://theagentictimes.org/incidents/south-korea-opens-inquiry-into-bank-breaches-linked-to-ai 2026-10-05T14:52:00.104496+00:00 0.8 https://theagentictimes.org/vulnerabilities/mysql-mcp-server-left-sql-wide-open-in-sse-mode 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/microsoft-patches-code-execution-flaw-in-visual-studio-copilot 2026-10-14T01:18:22.113903+00:00 0.8 https://theagentictimes.org/incidents/malware-hides-its-c2-address-inside-an-ai-written-poem 2026-10-07T17:36:06.947029+00:00 0.8 https://theagentictimes.org/incidents/moltbook-open-database-agent-tokens 2026-09-15T11:10:35.471093+00:00 0.8 https://theagentictimes.org/incidents/comet-browser-agent-reddit-hijack 2026-09-15T11:13:52.918468+00:00 0.8 https://theagentictimes.org/incidents/openai-apologises-for-agents-accessing-australian-government-sites 2026-09-29T22:25:02.83435+00:00 0.8 https://theagentictimes.org/explainers/shared-caches-let-sandboxed-agents-talk-matthew-green-warns 2026-10-01T13:27:52.225018+00:00 0.8 https://theagentictimes.org/vulnerabilities/trading-ai-agent-lets-anonymous-callers-run-shell-commands-as-root 2026-10-02T23:53:20.518643+00:00 0.8 https://theagentictimes.org/explainers/wiz-maps-how-stolen-credentials-reach-cloud-code-and-ai-systems 2026-10-06T13:34:43.582977+00:00 0.8 https://theagentictimes.org/vulnerabilities/kvm-guest-to-host-escape-zero-day-found-via-vercel-bounty 2026-10-06T22:09:00.591639+00:00 0.8 https://theagentictimes.org/incidents/compromised-github-actions-switched-back-on-with-malware-intact 2026-10-13T00:36:34.73235+00:00 0.8 https://theagentictimes.org/vendors/nvidia-launches-ai-agent-safety-platform-with-hardware-watchdog 2026-09-28T14:06:31.140604+00:00 0.8 https://theagentictimes.org/vulnerabilities/unsloth-studio-flaw-turned-model-inspection-into-code-execution 2026-09-29T22:24:23.658524+00:00 0.8 https://theagentictimes.org/incidents/replit-agent-wiped-production-database 2026-09-15T11:16:33.632426+00:00 0.8 https://theagentictimes.org/vulnerabilities/path-traversal-flaws-in-knowns-let-ai-agents-read-any-file 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/vm2-sandbox-leaks-host-https-tokens-via-shared-node-agent 2026-10-01T19:37:37.053819+00:00 0.8 https://theagentictimes.org/explainers/cisos-weigh-controls-on-ai-agents-without-losing-the-benefits 2026-09-15T14:17:35.085778+00:00 0.8 https://theagentictimes.org/incidents/claude-broke-into-a-strangers-machine-during-a-hacking-test 2026-09-15T11:09:12.610392+00:00 0.8 https://theagentictimes.org/vulnerabilities/langflow-unauthenticated-rce 2026-09-15T11:18:30.636018+00:00 0.8 https://theagentictimes.org/explainers/fewer-than-half-of-cisos-can-spot-every-ai-agent-okta-finds 2026-09-28T14:09:57.319967+00:00 0.8 https://theagentictimes.org/vulnerabilities/mcp-tool-in-functype-mcp-server-allows-remote-code-execution 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/incidents/anthropic-says-claude-was-abused-to-automate-attacks-and-weapons-work 2026-09-15T11:08:33.386488+00:00 0.8 https://theagentictimes.org/incidents/carbonato-botnet-turns-hijacked-docker-hosts-into-ai-agents 2026-09-28T14:10:34.230446+00:00 0.8 https://theagentictimes.org/vulnerabilities/anthropic-says-glm-5-3-crossed-a-binary-exploitation-threshold 2026-09-30T05:40:03.995711+00:00 0.8 https://theagentictimes.org/vulnerabilities/trigger-dev-cli-debug-logs-print-environment-secrets-in-plain-text 2026-10-02T23:54:11.753067+00:00 0.8 https://theagentictimes.org/vendors/wiz-says-agent-detection-must-start-with-model-logs 2026-10-06T14:07:14.624205+00:00 0.8 https://theagentictimes.org/incidents/weekly-roundup-warns-of-ai-agents-crossing-the-line 2026-09-15T11:05:47.537114+00:00 0.8 https://theagentictimes.org/incidents/openai-agent-swarm-linked-to-rubygems-supply-chain-attack 2026-09-15T11:06:29.539016+00:00 0.8 https://theagentictimes.org/explainers/ai-bug-hunting-ends-the-era-of-security-through-obscurity 2026-09-15T14:18:53.718945+00:00 0.8 https://theagentictimes.org/incidents/anthropic-says-hackers-used-claude-to-mine-1-8m-android-apps 2026-09-15T11:07:53.977199+00:00 0.8 https://theagentictimes.org/regulation/air-canada-chatbot-ruling 2026-09-22T08:17:07.929108+00:00 0.8 https://theagentictimes.org/vendors/trail-of-bits-disputes-1passwords-26-ai-patching-figure 2026-09-17T22:37:40.301206+00:00 0.8 https://theagentictimes.org/incidents/spain-logs-what-regulators-call-first-agentic-ai-data-breach 2026-09-18T01:26:45.507742+00:00 0.8 https://theagentictimes.org/vulnerabilities/agentflayer-shared-document-api-keys 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/mcphub-oauth-flaw-lets-attackers-swap-codes-for-tokens 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/shell-injection-flaw-in-code-ollama-runs-commands-with-no-prompt 2026-09-28T14:08:15.972257+00:00 0.8 https://theagentictimes.org/incidents/clawhub-malicious-skills-infostealers 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/echoleak-copilot-zero-click 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/two-cves-hit-github-copilot-and-visual-studio-code 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/two-flaws-disclosed-in-oktas-hyperdrive-agent-plugin 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/cursor-curxecute-one-message-rce 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/lenovo-reports-command-injection-flaw-in-tianxi-ai-agent-pc-app 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vendors/hugging-face-tells-ai-agents-to-go-hack-a-benchmark-instead 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/aws-patches-s3-bucket-flaw-in-security-agent-mcp-server 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/vulnerabilities/frontmcp-ssrf-patch-bypassed-via-dns-tricks-and-redirects 2026-09-15T11:04:53.630621+00:00 0.8 https://theagentictimes.org/incidents/salesloft-drift-salesforce-data-theft 2026-09-15T11:13:16.10627+00:00 0.8 https://theagentictimes.org/incidents/openai-sued-over-alleged-hacking-by-autonomous-ai-agents 2026-09-30T12:43:55.0335+00:00 0.8 https://theagentictimes.org/incidents/supabase-mcp-support-ticket-leak 2026-09-15T11:17:14.963806+00:00 0.8 https://theagentictimes.org/incidents/github-mcp-public-issue-private-leak 2026-09-15T11:17:53.426012+00:00 0.8 https://theagentictimes.org/vulnerabilities/central-dogma-git-mirror-trusts-any-ssh-host-key 2026-09-15T11:49:41.559104+00:00 0.8 https://theagentictimes.org/incidents/stolen-ai-logins-from-80-000-organisations-found-in-malware-logs 2026-09-28T14:09:20.966955+00:00 0.8 https://theagentictimes.org/vulnerabilities/ai-gateway-omniroute-exposes-remote-code-execution-flaw 2026-09-15T15:12:22.670171+00:00 0.8 https://theagentictimes.org/vulnerabilities/contentful-mcp-server-flaw-let-prompt-injection-steal-api-tokens 2026-09-17T23:19:35.624057+00:00 0.8 https://theagentictimes.org/incidents/reported-ai-actor-jadepuffer-wipes-azure-tenant-resources 2026-09-28T20:38:34.159966+00:00 0.8 https://theagentictimes.org/vulnerabilities/five-flaws-disclosed-in-ibm-langflow-oss-agent-builder 2026-09-16T14:00:44.853911+00:00 0.8 https://theagentictimes.org/explainers/a-practical-identity-framework-for-ai-agents-takes-shape 2026-09-28T20:42:20.241396+00:00 0.8 https://theagentictimes.org/vendors/snyk-says-autonomous-attacks-are-shrinking-the-defenders-window 2026-10-07T17:37:51.755814+00:00 0.8 https://theagentictimes.org/vendors/aiuc-raises-40-million-to-certify-enterprise-ai-agents 2026-09-18T00:44:06.603461+00:00 0.8 https://theagentictimes.org/vulnerabilities/gitlab-mcp-servers-read-only-mode-falls-to-a-stray-comma 2026-09-17T23:40:36.026807+00:00 0.8 https://theagentictimes.org/incidents/spain-reports-first-data-breach-caused-by-an-ai-agent 2026-09-18T00:01:24.623286+00:00 0.8 https://theagentictimes.org/vulnerabilities/one-browser-extension-could-hijack-ai-assistants-in-five-browsers 2026-09-18T01:05:10.311146+00:00 0.8 https://theagentictimes.org/explainers/dark-reading-asks-who-is-auditing-ai-agents-access 2026-09-28T20:39:52.258927+00:00 0.8 https://theagentictimes.org/incidents/ai-coding-agents-put-13-000-internal-images-on-public-github 2026-09-30T12:44:53.240053+00:00 0.8 https://theagentictimes.org/vulnerabilities/path-traversal-flaw-found-in-powerpoint-mcp-server 2026-10-01T23:58:16.55239+00:00 0.8 https://theagentictimes.org/vulnerabilities/a2ui-flaw-let-agent-supplied-buttons-run-javascript-in-the-browser 2026-10-02T23:55:01.289132+00:00 0.8 https://theagentictimes.org/incidents/attackers-exploit-ai-found-flaw-in-rejetto-file-server-within-a-day 2026-10-03T16:29:07.158591+00:00 0.8 https://theagentictimes.org/vulnerabilities/vllm-audio-flaw-lets-anyone-crash-unauthenticated-servers 2026-09-19T00:09:33.563632+00:00 0.8 https://theagentictimes.org/vulnerabilities/rust-mcp-server-flaw-leaks-sessions-until-memory-runs-out 2026-09-19T00:52:07.493114+00:00 0.8 https://theagentictimes.org/vulnerabilities/skipper-opa-body-checks-fail-open-on-chunked-requests 2026-09-20T00:33:52.794117+00:00 0.8 https://theagentictimes.org/vendors/microsoft-code-of-conduct-draws-line-on-ai-cyberattack-capability 2026-09-17T22:16:30.39699+00:00 0.8 https://theagentictimes.org/incidents/openai-security-staffer-says-capability-jumps-caught-team-off-guard 2026-09-28T20:40:50.517026+00:00 0.8 https://theagentictimes.org/incidents/new-rathat-android-malware-uses-ai-to-automate-device-control 2026-09-20T01:17:03.686555+00:00 0.8 https://theagentictimes.org/vendors/microsoft-adds-email-prompt-injection-filter-to-protect-copilot 2026-09-22T01:51:35.734885+00:00 0.8 https://theagentictimes.org/vendors/digicert-pitches-dns-and-certificates-as-agent-governance-tools 2026-09-17T22:58:37.870194+00:00 0.8 https://theagentictimes.org/vulnerabilities/openai-reports-agents-that-rewrote-their-own-instructions 2026-09-20T00:55:10.682918+00:00 0.8 https://theagentictimes.org/explainers/guide-urges-caution-before-ai-agents-pentest-live-websites 2026-09-19T01:35:14.088851+00:00 0.8 https://theagentictimes.org/vulnerabilities/plugin4shell-flaw-hits-major-ai-coding-agents 2026-09-20T01:37:27.102857+00:00 0.8 https://theagentictimes.org/incidents/hijacked-ai-coding-assistant-helped-spread-shai-hulud-worm 2026-09-18T00:22:47.497293+00:00 0.8 https://theagentictimes.org/vulnerabilities/bragjack-attack-turns-browser-ai-assistants-against-users 2026-09-18T01:48:01.645105+00:00 0.8 https://theagentictimes.org/explainers/security-roundup-flags-self-rewriting-agents-in-weekly-threat-list 2026-09-21T02:54:50.535532+00:00 0.8 https://theagentictimes.org/vulnerabilities/microsoft-fixes-maximum-severity-azure-ai-foundry-flaw 2026-09-21T00:53:59.78268+00:00 0.8 https://theagentictimes.org/vulnerabilities/plugin4shell-flaw-lets-plugin-owners-swap-code-in-ai-coding-agents 2026-09-21T00:32:54.517788+00:00 0.8 https://theagentictimes.org/incidents/critical-orkes-conductor-flaw-exploited-in-live-attacks 2026-09-20T02:40:48.798324+00:00 0.8 https://theagentictimes.org/vendors/new-plugin-keeps-api-keys-out-of-coding-agent-chat-sessions 2026-09-22T01:50:45.902641+00:00 0.8 https://theagentictimes.org/incidents/ai-driven-attack-breaches-dutch-bug-hunting-group-divd 2026-10-01T23:58:51.993935+00:00 0.8 https://theagentictimes.org/vulnerabilities/dns-rebinding-flaw-exposes-local-process-compose-mcp-tools 2026-09-18T21:01:54.930136+00:00 0.8 https://theagentictimes.org/vulnerabilities/rust-mcp-library-flaw-lets-rogue-servers-steal-oauth-tokens 2026-09-19T00:30:54.952272+00:00 0.8 https://theagentictimes.org/explainers/ey-survey-finds-ai-rollouts-outrunning-company-controls 2026-09-21T02:54:11.043263+00:00 0.8 https://theagentictimes.org/incidents/bug-hunters-used-claude-to-take-over-openai-staff-chatgpt-accounts 2026-09-21T01:15:08.979951+00:00 0.8 https://theagentictimes.org/vulnerabilities/toolhive-containers-can-reach-host-services-advisory-warns 2026-09-21T01:51:17.219813+00:00 0.8 https://theagentictimes.org/vendors/aws-open-sources-strands-box-to-fence-in-autonomous-agents 2026-10-07T23:14:06.022751+00:00 0.8 https://theagentictimes.org/vendors/gemini-may-get-broad-access-to-files-and-apps-on-macos 2026-10-13T06:40:08.340136+00:00 0.8 https://theagentictimes.org/vulnerabilities/ai-agents-can-retrain-their-own-models-mid-task-research-finds 2026-09-19T01:13:47.426134+00:00 0.8 https://theagentictimes.org/vulnerabilities/bragjack-demo-hijacks-ai-browser-agents-via-one-extension 2026-09-22T10:44:06.858193+00:00 0.8 https://theagentictimes.org/explainers/investors-bet-on-agent-identity-as-the-next-big-security-market 2026-09-22T00:28:24.929424+00:00 0.8 https://theagentictimes.org/vulnerabilities/few-ai-found-bugs-from-anthropics-glasswing-get-exploited 2026-09-22T10:42:44.583253+00:00 0.8 https://theagentictimes.org/incidents/microsoft-says-jadepuffer-crew-wiped-100-azure-storage-accounts 2026-09-28T20:41:49.216486+00:00 0.8 https://theagentictimes.org/incidents/claude-opus-5-used-to-take-over-openai-staff-accounts-in-test 2026-09-22T00:08:16.693813+00:00 0.8 https://theagentictimes.org/vulnerabilities/windows-malware-lets-four-ai-models-vote-on-its-next-move 2026-09-24T04:24:10.896412+00:00 0.8 https://theagentictimes.org/incidents/ai-agent-used-to-breach-spanish-organisation-report-says 2026-09-20T02:19:54.978782+00:00 0.8 https://theagentictimes.org/explainers/security-roundup-flags-ai-agent-code-execution-among-weeks-threats 2026-09-23T00:06:56.333047+00:00 0.8 https://theagentictimes.org/vulnerabilities/researcher-shows-meta-muse-flaw-can-hijack-dictation-on-macos 2026-09-22T10:44:07.069371+00:00 0.8 https://theagentictimes.org/regulation/treasury-chief-says-ai-bosses-will-answer-for-their-agents-crimes 2026-09-22T08:15:31.994139+00:00 0.8 https://theagentictimes.org/explainers/developer-defends-mcp-as-a-control-layer-not-just-plumbing 2026-09-22T09:20:23.595619+00:00 0.8 https://theagentictimes.org/explainers/runaway-agent-spending-flagged-as-an-enterprise-risk 2026-09-23T00:06:56.494121+00:00 0.8 https://theagentictimes.org/vulnerabilities/notebooklm-mcp-server-patched-over-arbitrary-file-write-flaw 2026-09-23T01:52:11.474271+00:00 0.8 https://theagentictimes.org/incidents/z-ai-apologises-after-zcode-uploaded-user-workspaces-to-the-cloud 2026-09-23T07:09:37.350748+00:00 0.8 https://theagentictimes.org/incidents/microsoft-and-met-police-shut-down-eviltokens-phishing-service 2026-09-23T02:34:41.147197+00:00 0.8 https://theagentictimes.org/vulnerabilities/command-injection-flaw-fixed-in-moonshot-ais-kimi-code-agent 2026-09-22T21:28:44.741171+00:00 0.8 https://theagentictimes.org/vulnerabilities/critical-bifrost-ai-gateway-flaw-allows-commands-without-login 2026-09-23T08:52:33.494947+00:00 0.8 https://theagentictimes.org/explainers/ai-agents-shift-the-question-security-teams-ask-about-access 2026-09-25T03:59:38.721479+00:00 0.8 https://theagentictimes.org/vulnerabilities/one-spoofed-header-unlocks-9routers-llm-api-to-strangers 2026-09-23T08:11:50.807799+00:00 0.8 https://theagentictimes.org/vulnerabilities/ckan-mcp-server-ssrf-guard-bypassed-for-the-third-time 2026-09-25T02:35:01.056695+00:00 0.8 https://theagentictimes.org/incidents/ai-agents-tried-to-break-into-us-and-canadian-government-sites 2026-10-01T23:59:26.167755+00:00 0.8 https://theagentictimes.org/incidents/teens-ai-hackbot-finds-microsoft-auth-flaw-in-internal-analytics 2026-09-30T19:28:58.753268+00:00 0.8 https://theagentictimes.org/vulnerabilities/six-critical-flaws-disclosed-in-mcp-atlassian-mcp-server 2026-09-24T01:34:50.068556+00:00 0.8 https://theagentictimes.org/vulnerabilities/three-critical-flaws-disclosed-in-mcp-atlassian-server 2026-09-24T02:37:16.851606+00:00 0.8 https://theagentictimes.org/vulnerabilities/openbao-agent-leaked-secrets-to-stdout-in-error-conditions 2026-09-24T03:20:30.433578+00:00 0.8 https://theagentictimes.org/vulnerabilities/two-flaws-disclosed-in-lightrags-api-server-and-web-interface 2026-09-24T03:40:12.377303+00:00 0.8 https://theagentictimes.org/vulnerabilities/home-assistant-green-flaw-lets-local-attackers-force-internal-requests 2026-09-25T02:14:41.291948+00:00 0.8 https://theagentictimes.org/vendors/xranges-for-ai-offers-a-score-for-autonomous-security-agents 2026-09-26T03:01:37.480769+00:00 0.8 https://theagentictimes.org/vulnerabilities/malware-lets-four-ai-models-vote-on-its-next-move 2026-09-25T01:12:01.355907+00:00 0.8 https://theagentictimes.org/incidents/compromised-memtensor-packages-spread-sckit-credential-stealer 2026-09-25T00:50:56.296821+00:00 0.8 https://theagentictimes.org/incidents/malicious-npm-package-posed-as-a-twilio-bug-bounty-tool 2026-09-24T00:30:57.88486+00:00 0.8 https://theagentictimes.org/vulnerabilities/mcp-python-sdk-flaw-let-rogue-servers-harvest-oauth-secrets 2026-09-29T08:39:28.677294+00:00 0.8 https://theagentictimes.org/incidents/malicious-ai-agents-skim-600-000-cards-from-online-shops 2026-09-25T03:37:50.450137+00:00 0.8 https://theagentictimes.org/vendors/outerlimit-raises-16m-to-block-rogue-ai-agent-actions 2026-09-25T00:08:12.186973+00:00 0.8 https://theagentictimes.org/incidents/attackers-poison-ai-chatbot-answers-to-push-phishing-links 2026-09-25T03:16:34.6417+00:00 0.8 https://theagentictimes.org/vendors/google-turns-ai-bug-hunters-loose-on-hospitals-and-rail-operators 2026-09-29T20:33:06.195599+00:00 0.8 https://theagentictimes.org/vulnerabilities/two-flaws-in-bytebases-dbhub-database-mcp-server-disclosed 2026-09-26T03:43:17.115792+00:00 0.8 https://theagentictimes.org/vendors/openai-shelves-gpt-6-1-astra-after-failed-safety-audits 2026-09-29T08:40:11.993259+00:00 0.8 https://theagentictimes.org/vulnerabilities/rmcp-oauth-client-fetches-attacker-chosen-urls-advisory-warns 2026-10-02T19:24:33.007625+00:00 0.8 https://theagentictimes.org/vulnerabilities/prompt-injection-flaw-reported-in-4b-agentic-ai-app-manus 2026-09-26T00:14:42.715238+00:00 0.8 https://theagentictimes.org/explainers/ai-written-code-leaks-secrets-at-twice-the-human-rate 2026-09-25T03:58:50.900762+00:00 0.8 https://theagentictimes.org/explainers/always-on-ai-coworkers-outgrow-agent-security-vendor-argues 2026-10-12T17:07:05.223084+00:00 0.8 https://theagentictimes.org/vulnerabilities/salesforce-agentforce-flaws-allowed-silent-crm-data-theft 2026-09-26T04:04:32.446115+00:00 0.8 https://theagentictimes.org/vulnerabilities/malicious-workspaces-could-hijack-amazon-q-developer-aws-says 2026-09-26T04:25:26.237344+00:00 0.8 https://theagentictimes.org/vulnerabilities/servicenow-patches-sql-injection-flaw-in-its-ai-platform 2026-09-26T04:47:10.673145+00:00 0.8 https://theagentictimes.org/vulnerabilities/decepticon-red-team-agent-can-be-hijacked-by-poisoned-web-pages 2026-09-27T00:43:06.719914+00:00 0.8 https://theagentictimes.org/vulnerabilities/nvidia-langchain-package-leaked-local-files-via-image-inputs 2026-09-27T01:03:53.703259+00:00 0.8 https://theagentictimes.org/vulnerabilities/cline-dashboard-flaw-lets-any-website-run-code-on-developer-machines 2026-09-27T01:25:36.374729+00:00 0.8 https://theagentictimes.org/incidents/carbonato-malware-plants-ai-agents-on-exposed-docker-hosts 2026-09-27T01:46:00.262032+00:00 0.8 https://theagentictimes.org/vendors/snyk-makes-mcp-governance-generally-available-in-evo-ads 2026-09-30T19:30:12.487132+00:00 0.8 https://theagentictimes.org/incidents/open-source-ai-agents-used-to-breach-27-firms-and-steal-card-data 2026-09-27T02:28:23.620306+00:00 0.8 https://theagentictimes.org/incidents/ai-harnesses-used-to-attack-hundreds-of-online-retailers 2026-09-25T04:20:16.670393+00:00 0.8 https://theagentictimes.org/incidents/security-roundup-flags-ai-coding-tool-leaking-private-repos 2026-09-26T03:21:54.306424+00:00 0.8 https://theagentictimes.org/incidents/openai-says-july-query-flood-extracted-its-models-reasoning 2026-09-30T23:59:10.944196+00:00 0.8 https://theagentictimes.org/explainers/who-is-liable-when-an-ai-agent-hacks-on-its-own 2026-09-27T02:07:09.422914+00:00 0.8 https://theagentictimes.org/vendors/ex-ibm-red-team-leaders-launch-ai-attack-platform-with-7m 2026-09-29T16:41:42.407622+00:00 0.8 https://theagentictimes.org/vulnerabilities/siyuan-patches-two-ai-agent-tool-flaws-in-note-taking-app 2026-10-04T09:28:34.873671+00:00 0.8 https://theagentictimes.org/vulnerabilities/path-traversal-flaws-let-knowns-mcp-agent-tools-escape-sandbox 2026-09-25T23:22:54.865648+00:00 0.8 https://theagentictimes.org/vendors/rig-security-launches-with-12m-for-agentic-ai-identity-risks 2026-09-29T16:36:57.93871+00:00 0.8 https://theagentictimes.org/vulnerabilities/command-injection-flaw-found-in-net-shell-wrapper-cliinvoke 2026-10-05T16:42:58.742629+00:00 0.8 https://theagentictimes.org/vendors/kontext-security-launches-with-4m-for-ai-agent-runtime-controls 2026-10-13T02:16:44.249276+00:00 0.8 https://theagentictimes.org/vulnerabilities/bragjack-attack-on-browser-ai-assistants-gets-a-brief-mention 2026-10-13T00:25:49.525202+00:00 0.8 https://theagentictimes.org/incidents/ai-agents-breaching-hugging-face-named-a-defining-2026-threat 2026-09-26T02:40:03.309469+00:00 0.8 https://theagentictimes.org/incidents/prosecutors-say-jailed-hacker-used-ai-jailbreak-to-seek-exploit-code 2026-10-04T23:01:58.745748+00:00 0.8 https://theagentictimes.org/vulnerabilities/encrypted-web-instructions-can-trick-github-copilot-cli-into-leaking-secrets 2026-10-06T15:18:04.66178+00:00 0.8 https://theagentictimes.org/incidents/fake-custom-gpts-used-to-push-clickfix-powershell-attacks 2026-09-29T16:38:02.868929+00:00 0.8 https://theagentictimes.org/vulnerabilities/gitpython-flaw-lets-hostile-repos-run-code-on-clone 2026-09-30T23:57:33.15207+00:00 0.8 https://theagentictimes.org/vulnerabilities/gitlab-patches-critical-rce-flaw-in-self-hosted-ai-gateway 2026-10-02T19:25:25.062314+00:00 0.8 https://theagentictimes.org/explainers/vendor-argues-soc-2-is-falling-behind-on-ai-agent-identities 2026-10-04T16:46:18.347819+00:00 0.8 https://theagentictimes.org/vulnerabilities/ai-coding-agent-swapped-its-own-model-to-fix-a-bug-lab-finds 2026-10-10T19:43:47.928176+00:00 0.8 https://theagentictimes.org/vulnerabilities/headroom-ai-proxy-accepts-websocket-requests-from-any-web-page 2026-10-04T08:00:50.603818+00:00 0.8 https://theagentictimes.org/vendors/doxx-net-raises-38m-for-ai-agent-guardrail-platform 2026-10-04T09:00:47.960476+00:00 0.8 https://theagentictimes.org/incidents/windows-botnet-x47-c-uses-xais-grok-api-to-pick-its-next-move 2026-10-04T22:15:28.153271+00:00 0.8 https://theagentictimes.org/explainers/dark-reading-argues-ai-sandbox-escapes-are-old-access-control-bugs 2026-10-05T06:04:29.26527+00:00 0.8 https://theagentictimes.org/vendors/apple-to-tighten-macos-full-disk-access-over-ai-agent-risk 2026-10-05T14:53:16.482929+00:00 0.8 https://theagentictimes.org/vulnerabilities/three-critical-flaws-let-attackers-run-code-on-langflow-servers 2026-10-05T22:44:15.918682+00:00 0.8 https://theagentictimes.org/vulnerabilities/langflow-flaw-lets-attackers-decrypt-stored-api-keys 2026-10-05T22:45:10.090398+00:00 0.8 https://theagentictimes.org/vulnerabilities/openclaw-chat-plugins-let-agents-read-off-limits-channels 2026-10-06T06:29:45.022944+00:00 0.8 https://theagentictimes.org/vulnerabilities/six-vllm-advisories-show-single-requests-can-kill-the-engine 2026-10-06T06:30:47.530276+00:00 0.8 https://theagentictimes.org/vulnerabilities/pyjwt-accepts-mismatched-ed25519-key-pairs-in-jwk-imports 2026-10-06T06:31:46.831095+00:00 0.8 https://theagentictimes.org/vulnerabilities/simple-git-flaw-lets-crafted-clone-arguments-run-shell-commands 2026-10-06T06:32:47.23112+00:00 0.8 https://theagentictimes.org/vulnerabilities/vllm-drops-cache-salt-in-tool-turns-leaking-prompt-hints 2026-10-06T06:33:41.159964+00:00 0.8 https://theagentictimes.org/incidents/forgotten-oauth-grants-blamed-for-klue-breach 2026-10-08T20:06:37.658575+00:00 0.8 https://theagentictimes.org/vulnerabilities/langchain-redis-package-patched-over-search-filter-injection 2026-10-06T21:04:30.11462+00:00 0.8 https://theagentictimes.org/vulnerabilities/payload-patches-mcp-plugin-flaw-that-allowed-account-takeover 2026-10-06T21:05:20.048578+00:00 0.8 https://theagentictimes.org/vulnerabilities/malicious-repo-config-triggers-code-execution-in-knowns-lsp 2026-10-06T21:06:16.553117+00:00 0.8 https://theagentictimes.org/incidents/wikimedia-confirms-rogue-openai-agents-edited-its-wikis 2026-10-07T01:38:06.711183+00:00 0.8 https://theagentictimes.org/vendors/hadrian-raises-40-million-for-autonomous-offensive-security 2026-10-07T17:32:02.953264+00:00 0.8 https://theagentictimes.org/vulnerabilities/actual-sync-server-proxy-flaw-exposes-private-github-repos 2026-10-07T17:32:56.489636+00:00 0.8 https://theagentictimes.org/vulnerabilities/praisonai-email-bot-accepts-forged-webhooks-advisories-say 2026-10-07T17:33:49.297235+00:00 0.8 https://theagentictimes.org/vulnerabilities/two-critical-flaws-in-flowise-expose-data-and-allow-remote-code-execution 2026-10-07T17:35:30.180002+00:00 0.8 https://theagentictimes.org/vulnerabilities/unpatched-critical-flaw-in-lmcache-lets-attackers-run-code 2026-10-07T17:36:44.105467+00:00 0.8 https://theagentictimes.org/explainers/agentic-pentesting-pitch-gets-a-reality-check 2026-10-07T17:37:16.969553+00:00 0.8 https://theagentictimes.org/vulnerabilities/next-js-dev-server-leaks-source-code-through-open-mcp-endpoint 2026-10-07T23:11:41.906002+00:00 0.8 https://theagentictimes.org/vendors/anthropic-loosens-claude-guardrails-for-vetted-defenders 2026-10-07T23:12:41.68653+00:00 0.8 https://theagentictimes.org/regulation/australia-weighs-mandatory-ai-incident-reporting-after-medicare-attack 2026-10-07T23:13:33.538938+00:00 0.8 https://theagentictimes.org/incidents/malicious-build-of-tensorlake-npm-package-carries-credential-stealer 2026-10-08T13:41:53.053201+00:00 0.8 https://theagentictimes.org/vulnerabilities/control-characters-let-crafted-cookies-slip-past-coraza-waf 2026-10-08T20:04:50.992541+00:00 0.8 https://theagentictimes.org/incidents/ai-pentesting-tool-artex-used-to-steal-data-from-korean-banks 2026-10-08T20:05:27.431992+00:00 0.8 https://theagentictimes.org/vulnerabilities/agentcorruption-flaw-in-aws-bedrock-agentcore-now-patched 2026-10-12T05:18:05.892879+00:00 0.8 https://theagentictimes.org/vendors/rein-security-raises-25-million-for-ai-agent-runtime-defence 2026-10-12T21:49:14.90436+00:00 0.8 https://theagentictimes.org/vulnerabilities/banks-prompt-library-turns-user-text-into-system-messages 2026-10-09T00:32:03.695893+00:00 0.8 https://theagentictimes.org/vulnerabilities/researchers-claim-a-formula-for-when-chatbots-turn-bad 2026-10-09T09:12:49.347946+00:00 0.8 https://theagentictimes.org/vulnerabilities/pydantic-ai-patches-six-flaws-in-its-agent-framework 2026-10-09T12:03:46.430912+00:00 0.8 https://theagentictimes.org/incidents/ai-used-in-breaches-of-south-korean-banks-securityweek-reports 2026-10-09T17:04:35.502665+00:00 0.8 https://theagentictimes.org/explainers/dark-reading-warns-ai-agents-could-become-the-next-bec-target 2026-10-09T17:05:40.591613+00:00 0.8 https://theagentictimes.org/vulnerabilities/mechanize-leaked-auth-headers-to-redirect-targets 2026-10-12T21:51:15.247689+00:00 0.8 https://theagentictimes.org/vulnerabilities/aws-agentcore-agents-gave-up-credentials-to-a-single-prompt 2026-10-09T22:44:34.123642+00:00 0.8 https://theagentictimes.org/incidents/anthropic-agents-filed-20-incomplete-visa-forms-on-us-government-site 2026-10-10T06:00:27.027057+00:00 0.8 https://theagentictimes.org/explainers/most-ai-agents-in-the-enterprise-never-touch-single-sign-on 2026-10-10T12:40:12.773273+00:00 0.8 https://theagentictimes.org/vulnerabilities/zotero-mcp-server-flaw-lets-prompt-injection-probe-internal-networks 2026-10-10T18:41:59.394576+00:00 0.8 https://theagentictimes.org/vulnerabilities/sandbox-flaw-in-mini-swe-agent-can-leak-api-keys-to-injected-tasks 2026-10-12T02:32:20.426246+00:00 0.8 https://theagentictimes.org/vulnerabilities/ai-agents-breached-simulated-factory-in-16-minutes-lab-finds 2026-10-12T03:23:06.343002+00:00 0.8 https://theagentictimes.org/explainers/vendor-report-warns-security-moves-slower-than-ai-agents 2026-10-12T21:49:02.30034+00:00 0.8 https://theagentictimes.org/vulnerabilities/agent-api-keys-can-hijack-telegram-bindings-in-abilityai-trinity 2026-10-11T18:59:14.85806+00:00 0.8 https://theagentictimes.org/vulnerabilities/symlinks-let-coding-agents-write-files-outside-their-sandbox 2026-10-12T08:57:45.505042+00:00 0.8 https://theagentictimes.org/vulnerabilities/four-security-flaws-disclosed-in-praisonai-agent-framework 2026-10-12T11:24:36.994608+00:00 0.8 https://theagentictimes.org/incidents/carbonato-botnet-installs-ai-agent-on-hacked-docker-hosts 2026-10-12T12:22:26.722933+00:00 0.8 https://theagentictimes.org/explainers/gruber-warns-metas-cute-muse-agent-is-a-power-tool-not-a-toy 2026-10-12T13:24:13.34552+00:00 0.8 https://theagentictimes.org/explainers/employees-personal-ai-agents-are-already-logged-in-at-work 2026-10-12T15:38:55.349339+00:00 0.8 https://theagentictimes.org/explainers/webinar-pitches-runtime-identity-controls-against-ai-driven-escalation 2026-10-13T16:08:28.649548+00:00 0.8 https://theagentictimes.org/incidents/researchers-say-cyberxero-used-claude-code-in-ukraine-data-theft 2026-10-12T15:39:31.684757+00:00 0.8 https://theagentictimes.org/vendors/runaway-agents-revive-the-case-for-hard-spending-caps 2026-10-12T17:33:56.462667+00:00 0.8 https://theagentictimes.org/vulnerabilities/mechanize-leaked-credentials-across-origins-on-meta-refresh 2026-10-12T19:29:30.920086+00:00 0.8 https://theagentictimes.org/incidents/crowdsec-says-npm-supply-chain-attack-exposed-170-repositories 2026-10-12T20:44:33.924655+00:00 0.8 https://theagentictimes.org/vulnerabilities/nginx-ui-patches-mcp-tool-that-skipped-config-safety-checks 2026-10-12T23:03:36.240912+00:00 0.8 https://theagentictimes.org/vulnerabilities/three-flaws-in-obot-mcp-platform-let-attackers-steal-api-tokens 2026-10-13T10:11:17.712246+00:00 0.8 https://theagentictimes.org/vulnerabilities/command-whitelist-in-mac-shell-mcp-bypassed-with-a-semicolon 2026-10-13T08:05:49.299285+00:00 0.8 https://theagentictimes.org/vulnerabilities/anthropic-warns-small-ai-models-may-self-replicate-on-iot-devices 2026-10-13T16:07:53.207353+00:00 0.8 https://theagentictimes.org/vendors/vmware-sells-hyperarmor-to-slow-its-own-ai-found-patch-flood 2026-10-13T16:09:05.54241+00:00 0.8 https://theagentictimes.org/vulnerabilities/five-flaws-let-roo-code-auto-approve-banned-shell-commands 2026-10-13T21:21:28.899123+00:00 0.8 https://theagentictimes.org/vulnerabilities/atlassian-mcp-server-still-open-to-ssrf-after-partial-fix 2026-10-14T10:38:45.580234+00:00 0.8 https://theagentictimes.org/incidents/excel-mcp-server-path-confinement-bypass-in-stdio-mode 2026-10-01T15:11:26.84294+00:00 0.5 https://theagentictimes.org/incidents/codewhale-multiple-critical-vulnerabilities-in-v0-8-37-0-8-63 2026-10-01T15:11:28.428307+00:00 0.5 https://theagentictimes.org/incidents/github-mcp-private-repo-leak 2026-10-01T15:10:22.069249+00:00 0.5 https://theagentictimes.org/incidents/gemini-cli-prompt-injection-code-execution 2026-10-01T15:10:22.103334+00:00 0.5 https://theagentictimes.org/incidents/amazon-q-developer-extension-wiper-prompt 2026-10-01T15:10:22.116554+00:00 0.5 https://theagentictimes.org/incidents/cursor-curxecute-cve-2025-54135 2026-10-01T15:10:22.148232+00:00 0.5 https://theagentictimes.org/incidents/supabase-mcp-service-role-leak 2026-10-01T15:10:22.699081+00:00 0.5 https://theagentictimes.org/incidents/forcedleak-salesforce-agentforce 2026-10-01T15:10:22.978655+00:00 0.5 https://theagentictimes.org/incidents/knowns-path-traversal-vulnerabilities-in-mcp-tool-arguments 2026-10-01T15:11:29.155232+00:00 0.5 https://theagentictimes.org/incidents/perplexity-comet-prompt-injection 2026-10-01T15:10:23.405932+00:00 0.5 https://theagentictimes.org/incidents/shadowleak-chatgpt-deep-research 2026-10-01T15:10:23.407927+00:00 0.5 https://theagentictimes.org/incidents/air-canada-chatbot-tribunal 2026-10-01T15:10:23.509583+00:00 0.5 https://theagentictimes.org/incidents/anthropic-gtg-1002-espionage 2026-10-01T15:10:23.800781+00:00 0.5 https://theagentictimes.org/incidents/salesloft-drift-oauth-theft 2026-10-01T15:10:24.182954+00:00 0.5 https://theagentictimes.org/incidents/mcp-inspector-cve-2025-49596 2026-10-01T15:10:24.216353+00:00 0.5 https://theagentictimes.org/incidents/langflow-cve-2025-3248 2026-10-01T15:10:24.456169+00:00 0.5 https://theagentictimes.org/incidents/autogpt-platform-ssrf-in-senddiscordfileblock-cve-2025-62616 2026-10-01T15:10:32.500644+00:00 0.5 https://theagentictimes.org/incidents/single-browser-extension-could-hijack-ai-assistants-in-five-browsers 2026-10-01T15:11:32.135093+00:00 0.5 https://theagentictimes.org/incidents/clawhub-malicious-skills 2026-10-01T15:10:24.212906+00:00 0.5 https://theagentictimes.org/incidents/gemini-calendar-invite-promptware 2026-10-01T15:10:24.302526+00:00 0.5 https://theagentictimes.org/incidents/agentflayer-chatgpt-connectors 2026-10-01T15:10:24.700455+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-9611-dns-rebinding-in-microsoft-playwright-mcp-server-via-missing-origi 2026-10-01T15:10:29.202752+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-67366-path-traversal-via-symlinks-in-sylphxltd-filesystem-mcp-v0-5-8 2026-10-01T15:10:29.442619+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-22785-code-injection-in-orval-mcp-server-generation-from-openapi-specs 2026-10-01T15:10:30.239031+00:00 0.5 https://theagentictimes.org/incidents/microsoft-and-uk-police-dismantle-eviltokens-ai-powered-phishing-kit 2026-10-01T15:11:35.510175+00:00 0.5 https://theagentictimes.org/incidents/ai-agent-used-to-breach-cybersecurity-nonprofit-divd 2026-10-01T15:11:41.897003+00:00 0.5 https://theagentictimes.org/incidents/tencent-weknora-agent-flaws-allow-prompt-based-db-access-and-command-injection 2026-10-01T15:10:29.956682+00:00 0.5 https://theagentictimes.org/incidents/salesbleed-salesforce-agentforce-flaws-enabled-0-click-crm-data-theft-phishing 2026-10-01T15:11:38.835542+00:00 0.5 https://theagentictimes.org/incidents/attackers-use-fake-chatgpt-custom-gpts-in-clickfix-malware-attacks 2026-10-01T15:11:41.786757+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-zen-mcp-server-allows-arbitrary-file-reads-cve-2025-66689 2026-10-01T15:10:29.960591+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-77177-open-genai-stack-prompt-injection-in-meta-ai-backend 2026-10-01T15:11:42.115547+00:00 0.5 https://theagentictimes.org/incidents/central-dogma-git-mirror-disables-ssh-host-key-verification-cve-2026-11745 2026-10-01T15:10:28.826548+00:00 0.5 https://theagentictimes.org/incidents/ollama-agent-mode-bash-approval-bypass-via-prompt-injection 2026-10-01T15:11:42.115547+00:00 0.5 https://theagentictimes.org/incidents/anthropic-discloses-fourth-case-of-claude-accessing-third-party-systems-without- 2026-10-01T15:10:28.210565+00:00 0.5 https://theagentictimes.org/incidents/anthropic-reports-threat-actors-abusing-claude-for-cyberattacks-weapons-and-surv 2026-10-01T15:10:28.398268+00:00 0.5 https://theagentictimes.org/incidents/threat-actors-abused-anthropics-claude-to-extract-secrets-from-1-8m-android-apps 2026-10-01T15:10:28.452977+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-59973-ssrf-fix-bypass-in-frontmcp-and-mcp-from-openapi-openapi-ref-hand 2026-10-01T15:10:28.857188+00:00 0.5 https://theagentictimes.org/incidents/openai-agent-swarm-tied-to-may-2026-rubygems-supply-chain-attack 2026-10-01T15:10:29.046916+00:00 0.5 https://theagentictimes.org/incidents/openai-reports-adversarial-distillation-attack-tied-to-moonshot-ai 2026-10-01T15:11:42.802394+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-21445-missing-authentication-on-langflow-api-endpoints-exposes-conversa 2026-10-01T15:10:29.205185+00:00 0.5 https://theagentictimes.org/incidents/opencode-ai-coding-agent-unauthenticated-local-rce-and-xss-in-web-ui 2026-10-01T15:10:30.231083+00:00 0.5 https://theagentictimes.org/incidents/cve-2024-58340-redos-in-langchain-mrkl-agent-output-parser 2026-10-01T15:10:30.266788+00:00 0.5 https://theagentictimes.org/incidents/sandbox-escape-in-enclave-javascript-sandbox-for-ai-agents-cve-2026-22686 2026-10-01T15:10:30.502804+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-22708-cursor-agent-allowlist-bypass-lets-shell-built-ins-run-unapproved 2026-10-01T15:10:30.796302+00:00 0.5 https://theagentictimes.org/incidents/mcpjam-inspector-1-4-2-remote-code-execution-via-crafted-mcp-server-install-requ 2026-10-01T15:10:30.96289+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-23523-dive-mcp-host-deeplink-allows-arbitrary-command-execution 2026-10-01T15:10:31.299109+00:00 0.5 https://theagentictimes.org/incidents/tensorlake-npm-package-compromised-with-shai-hulud-credential-stealing-worm 2026-10-08T13:39:39.880858+00:00 0.5 https://theagentictimes.org/incidents/vm2-exposes-host-https-credentials-through-globalagent 2026-10-01T19:37:37.892578+00:00 0.5 https://theagentictimes.org/incidents/three-information-disclosure-flaws-in-microsoft-copilot-copilot-studio-and-m365- 2026-10-01T15:10:31.276003+00:00 0.5 https://theagentictimes.org/incidents/unauthenticated-command-injection-rce-in-framelink-figma-and-ollama-mcp-servers 2026-10-01T15:10:31.50189+00:00 0.5 https://theagentictimes.org/incidents/chattermate-ai-chatbot-xss-via-chat-input-exposes-tokens-cve-2026-24399 2026-10-01T15:10:31.78064+00:00 0.5 https://theagentictimes.org/incidents/prompt-injection-via-road-signs-shown-to-hijack-autonomous-cars-and-drones 2026-10-01T15:10:31.996165+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-22792-5ire-mcp-client-html-injection-enables-mcp-server-creation-and-rc 2026-10-01T15:10:32.308863+00:00 0.5 https://theagentictimes.org/incidents/ai-agents-attempted-to-hack-us-and-canadian-government-websites 2026-10-01T23:57:06.689719+00:00 0.5 https://theagentictimes.org/incidents/klue-breach-via-exploited-forgotten-oauth-grants 2026-10-08T20:02:32.552126+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-25546-command-injection-in-godot-mcp-mcp-server-enables-rce 2026-10-01T15:10:32.524127+00:00 0.5 https://theagentictimes.org/incidents/pydantic-ai-framework-patches-path-traversal-xss-and-ssrf-vulnerabilities 2026-10-01T15:10:32.85709+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-25650-mcp-salesforce-connector-leaks-salesforce-auth-token 2026-10-01T15:10:33.0201+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-25533-sandbox-escape-in-enclave-javascript-sandbox-for-ai-agent-code 2026-10-01T15:10:33.046294+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-25905-mcp-run-python-sandbox-escape-enables-mcp-server-hijacking 2026-10-01T15:10:33.354308+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-1868-template-injection-in-gitlab-ai-gateway-duo-workflow-service 2026-10-01T15:10:33.676224+00:00 0.5 https://theagentictimes.org/incidents/agentic-ai-attack-breaches-divd-via-zammad-zero-days-steals-volunteer-data 2026-10-01T23:57:22.913127+00:00 0.5 https://theagentictimes.org/incidents/ai-pentesting-tool-artex-used-in-attacks-on-south-korean-financial-firms 2026-10-08T20:02:53.188971+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-ai-agent-platform-unauthenticated-plugin-api-access-and-ssrf-flaws 2026-10-01T15:10:33.880775+00:00 0.5 https://theagentictimes.org/incidents/langchain-ssrf-flaws-in-chatopenai-token-counter-and-recursiveurlloader 2026-10-01T15:10:34.150743+00:00 0.5 https://theagentictimes.org/incidents/command-injection-in-sf-mcp-server-salesforce-mcp-server-cve-2026-26029 2026-10-01T15:10:34.16455+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-26268-cursor-sandbox-escape-via-writable-git-configuration 2026-10-01T15:10:34.420057+00:00 0.5 https://theagentictimes.org/incidents/multiple-openclaw-ai-assistant-vulnerabilities-disclosed-including-prompt-inject 2026-10-01T15:10:37.30011+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-27597-sandbox-escape-in-enclave-ai-agent-javascript-sandbox-enables-rce 2026-10-01T15:10:36.499908+00:00 0.5 https://theagentictimes.org/incidents/langchain-ssrf-redirect-bypass-and-langsmith-studio-token-leak-vulnerabilities 2026-10-01T15:10:37.028172+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-26057-cisco-skill-scanner-api-server-unauthenticated-dos-and-arbitrary- 2026-10-01T15:10:37.296348+00:00 0.5 https://theagentictimes.org/incidents/parse-dashboard-ai-agent-endpoint-flaws-allow-unauthenticated-master-key-databas 2026-10-01T15:10:37.31771+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-mcp-git-servers-git-add-tool-stages-files-outside-repository 2026-10-01T15:10:37.801089+00:00 0.5 https://theagentictimes.org/incidents/zed-editor-agent-file-tools-symlink-escape-cve-2026-27967 2026-10-01T15:10:38.267422+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-12345-remote-buffer-overflow-in-llm-claw-agent-deployment-function 2026-10-01T15:10:38.329504+00:00 0.5 https://theagentictimes.org/incidents/office-powerpoint-mcp-server-path-traversal-via-prompt-injection 2026-10-01T23:58:17.063882+00:00 0.5 https://theagentictimes.org/incidents/langflow-csv-agent-node-rce-via-prompt-injection-cve-2026-27966 2026-10-01T15:10:38.14326+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-2256-command-injection-in-modelscope-ms-agent-via-prompt-derived-input 2026-10-01T15:10:38.266171+00:00 0.5 https://theagentictimes.org/incidents/trivy-vs-code-extension-1-8-12-on-openvsx-compromised-to-exfiltrate-secrets-via- 2026-10-01T15:10:38.627417+00:00 0.5 https://theagentictimes.org/incidents/mcp-memory-service-exposes-system-details-via-unauthenticated-health-endpoint-cv 2026-10-01T15:10:39.129163+00:00 0.5 https://theagentictimes.org/incidents/agentgateway-mcp-to-openapi-request-injection-flaw-cve-2026-29791 2026-10-01T15:10:39.149418+00:00 0.5 https://theagentictimes.org/incidents/github-copilot-cli-shell-tool-bypass-allows-arbitrary-code-execution-cve-2026-29 2026-10-01T15:10:39.15294+00:00 0.5 https://theagentictimes.org/incidents/mechanize-library-leaks-credentials-on-http-redirects 2026-10-09T00:30:24.470084+00:00 0.5 https://theagentictimes.org/incidents/rmcp-oauth-client-ssrf-via-server-controlled-resource-metadata-url 2026-10-02T19:24:34.173277+00:00 0.5 https://theagentictimes.org/incidents/weknora-mcp-tool-name-collision-enables-prompt-injection-and-tool-hijacking 2026-10-01T15:10:39.355134+00:00 0.5 https://theagentictimes.org/incidents/microsoft-discloses-ai-command-injection-in-m365-copilot-and-ssrf-in-azure-mcp-s 2026-10-01T15:10:39.416225+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-31854-cursor-indirect-prompt-injection-enables-automatic-command-execut 2026-10-01T15:10:39.8554+00:00 0.5 https://theagentictimes.org/incidents/mcp-atlassian-server-flaws-allow-ssrf-and-arbitrary-file-write-before-v0-17-0 2026-10-01T15:10:39.875958+00:00 0.5 https://theagentictimes.org/incidents/ha-mcp-home-assistant-mcp-server-ssrf-and-xss-flaws-in-beta-oauth-consent-form 2026-10-01T15:10:39.967205+00:00 0.5 https://theagentictimes.org/incidents/rogue-ai-agent-implicated-in-security-incident-at-meta 2026-10-01T15:10:40.746758+00:00 0.5 https://theagentictimes.org/incidents/critical-rce-vulnerability-patched-in-gitlab-ai-gateway-duo-agent-platform 2026-10-02T19:24:53.444376+00:00 0.5 https://theagentictimes.org/incidents/banks-prompt-injection-via-user-controlled-chat-messages 2026-10-09T00:32:04.464552+00:00 0.5 https://theagentictimes.org/incidents/fastmcp-oauth-token-audience-flaw-cve-2025-69196-fixed-in-2-14-2 2026-10-01T15:10:40.723237+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-4270-aws-api-mcp-server-file-access-restriction-bypass 2026-10-01T15:10:40.727763+00:00 0.5 https://theagentictimes.org/incidents/command-injection-flaws-in-microsoft-copilot-and-m365-copilot-allow-information- 2026-10-01T15:10:40.907997+00:00 0.5 https://theagentictimes.org/incidents/discourse-xss-via-prompt-injection-in-ai-triage-review-queue-cve-2026-27740 2026-10-01T15:10:41.014594+00:00 0.5 https://theagentictimes.org/incidents/sqlbot-stored-prompt-injection-chain-enables-rce-cve-2026-32622 2026-10-01T15:10:41.489635+00:00 0.5 https://theagentictimes.org/incidents/agentcorruption-flaw-in-aws-bedrock-agentcore-could-enable-fleet-takeover 2026-10-09T00:28:33.647004+00:00 0.5 https://theagentictimes.org/incidents/trigger-dev-cli-debug-logs-expose-resolved-environment-secrets 2026-10-02T23:54:12.438143+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-ci-workflow-flaw-allows-code-execution-and-secret-theft-cve-2026-33075 2026-10-01T15:10:41.934424+00:00 0.5 https://theagentictimes.org/incidents/multiple-cves-in-pinchtab-ai-agent-browser-control-server 2026-10-01T15:10:42.107528+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-33010-wildcard-cors-in-mcp-memory-service-exposes-agent-memories 2026-10-01T15:10:42.283018+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-5584-remote-code-injection-in-agenticseek-pyinterpreter-execute 2026-10-01T15:10:45.978231+00:00 0.5 https://theagentictimes.org/incidents/multiple-critical-vulnerabilities-in-praisonai-multi-agent-framework-8-cves 2026-10-01T15:10:46.560879+00:00 0.5 https://theagentictimes.org/incidents/a2ui-web-core-openurl-permits-javascript-uri-execution 2026-10-02T23:55:02.036426+00:00 0.5 https://theagentictimes.org/incidents/command-injection-in-openhands-git-diff-api-allows-arbitrary-commands-in-agent-s 2026-10-01T15:10:42.980286+00:00 0.5 https://theagentictimes.org/incidents/prompt-injection-bypasses-safe-command-auto-approval-in-multiple-ai-coding-exten 2026-10-01T15:10:43.097048+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-4530-sql-injection-in-aix-db-text2sql-agent-terminology-retriever 2026-10-01T15:10:43.317377+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-5607-ssrf-in-imprvhub-mcp-browser-agent-up-to-0-8-0 2026-10-01T15:10:45.978093+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-35394-mobile-mcp-url-tool-allows-arbitrary-android-intent-execution 2026-10-01T15:10:46.023458+00:00 0.5 https://theagentictimes.org/incidents/dns-rebinding-flaw-in-mcp-java-sdk-allows-remote-tool-calls-cve-2026-35568 2026-10-01T15:10:46.226075+00:00 0.5 https://theagentictimes.org/incidents/os-command-injection-in-github-copilot-and-visual-studio-code 2026-10-01T15:11:14.362033+00:00 0.5 https://theagentictimes.org/incidents/zero-click-prompt-injection-in-nanobot-ai-assistant-email-channel-cve-2026-33654 2026-10-01T15:10:43.573506+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-mobilenext-mobile-mcp-mcp-server-cve-2026-33989 2026-10-01T15:10:43.746213+00:00 0.5 https://theagentictimes.org/incidents/kql-injection-in-azure-data-explorer-mcp-server-cve-2026-33980 2026-10-01T15:10:43.760616+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-5002-prompt-injection-in-localgpt-llm-prompt-handler 2026-10-01T15:10:43.891341+00:00 0.5 https://theagentictimes.org/incidents/unauthenticated-mcp-endpoint-in-nginx-ui-allows-full-nginx-takeover-cve-2026-330 2026-10-01T15:10:43.936758+00:00 0.5 https://theagentictimes.org/incidents/langchain-path-traversal-in-prompt-loading-allows-arbitrary-file-read-cve-2026-3 2026-10-01T15:10:44.252528+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-4399-prompt-injection-in-1millionbot-millie-chatbot 2026-10-01T15:10:44.461203+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-29870-path-traversal-enables-arbitrary-file-write-in-agentic-context-en 2026-10-01T15:10:44.5713+00:00 0.5 https://theagentictimes.org/incidents/giskard-library-flaw-chatworkflow-chat-renders-input-as-jinja2-template-enabling 2026-10-01T15:10:44.624703+00:00 0.5 https://theagentictimes.org/incidents/nhost-cli-mcp-server-lacked-authentication-and-cors-enforcement-cve-2026-34200 2026-10-01T15:10:44.762619+00:00 0.5 https://theagentictimes.org/incidents/fastmcp-flaws-before-3-2-0-authenticated-ssrf-and-oauth-confused-deputy 2026-10-01T15:10:45.180181+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-64340-command-injection-in-fastmcp-install-commands-on-windows 2026-10-01T15:10:45.249723+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-34451-path-validation-flaw-in-anthropic-typescript-sdk-memory-tool 2026-10-01T15:10:45.292395+00:00 0.5 https://theagentictimes.org/incidents/origin-validation-flaws-in-official-mcp-java-and-go-sdks-allow-cross-site-access 2026-10-01T15:10:45.305979+00:00 0.5 https://theagentictimes.org/incidents/praisonai-multiple-critical-security-vulnerabilities 2026-10-09T00:29:34.460454+00:00 0.5 https://theagentictimes.org/incidents/ssrf-vulnerability-in-a11y-mcp-mcp-server-cve-2026-5323 2026-10-01T15:10:45.449458+00:00 0.5 https://theagentictimes.org/incidents/frontmcp-ssrf-and-local-file-read-via-unrestricted-openapi-ref-dereferencing-cve 2026-10-01T15:10:46.720047+00:00 0.5 https://theagentictimes.org/incidents/command-injection-in-awwaiid-mcp-server-taskwarrior-up-to-1-0-1-cve-2026-5833 2026-10-01T15:10:46.724367+00:00 0.5 https://theagentictimes.org/incidents/agixt-path-traversal-in-essential-abilities-allows-arbitrary-file-access-cve-202 2026-10-01T15:10:46.810275+00:00 0.5 https://theagentictimes.org/incidents/apollo-mcp-server-dns-rebinding-flaw-allows-local-tool-invocation-cve-2026-35577 2026-10-01T15:10:46.879898+00:00 0.5 https://theagentictimes.org/incidents/langchain-prompt-template-validation-flaw-and-langchain-chatchat-mcp-rce-disclos 2026-10-01T15:10:47.073892+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-35651-ansi-escape-injection-in-openclaw-approval-prompts 2026-10-01T15:10:47.5107+00:00 0.5 https://theagentictimes.org/incidents/trigger-dev-server-side-request-forgery-via-webhook-alert-channels 2026-10-02T23:52:22.969692+00:00 0.5 https://theagentictimes.org/incidents/aws-mcp-server-command-injection-flaws-allow-unauthenticated-remote-code-executi 2026-10-01T15:10:47.605408+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-23653-command-injection-in-github-copilot-and-visual-studio-code 2026-10-01T15:10:47.782901+00:00 0.5 https://theagentictimes.org/incidents/argument-injection-in-mcp-server-kubernetes-port-forward-tool-cve-2026-39884 2026-10-01T15:10:48.048644+00:00 0.5 https://theagentictimes.org/incidents/splunk-mcp-server-app-logs-session-and-authorization-tokens-in-clear-text-cve-20 2026-10-01T15:10:48.27835+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-30615-prompt-injection-in-windsurf-enables-rce-via-malicious-mcp-server 2026-10-01T15:10:48.327216+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-30624-remote-code-execution-in-agent-zero-mcp-server-configuration 2026-10-01T15:10:48.329239+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-30616-remote-code-execution-in-jaaz-1-0-30-mcp-stdio-command-handling 2026-10-01T15:10:48.398747+00:00 0.5 https://theagentictimes.org/incidents/ai-used-in-korean-bank-breaches 2026-10-09T17:04:36.239162+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-39313-unbounded-request-body-in-mcp-framework-enables-remote-dos 2026-10-01T15:10:48.838604+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-6494-log-injection-in-ansible-automation-platform-mcp-server 2026-10-01T15:10:48.93824+00:00 0.5 https://theagentictimes.org/incidents/claude-code-flaws-windows-config-hijack-and-symlink-sandbox-escape 2026-10-01T15:10:49.111338+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-nosql-injection-flaws-allow-authentication-bypass-and-account-takeover 2026-10-01T15:10:49.163519+00:00 0.5 https://theagentictimes.org/incidents/mcp-neo4j-cypher-read-only-bypass-via-apoc-procedures-cve-2026-35402 2026-10-01T15:10:49.451648+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-66335-sql-injection-flaw-in-apache-doris-mcp-server-before-0-6-1 2026-10-01T15:10:49.458055+00:00 0.5 https://theagentictimes.org/incidents/two-remotely-exploitable-flaws-disclosed-in-ericc-ch-copilot-api-up-to-0-7-0 2026-10-01T15:10:49.621759+00:00 0.5 https://theagentictimes.org/incidents/vibe-trading-llm-agent-multiple-critical-vulnerabilities 2026-10-02T23:53:21.207594+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-40608-unbounded-request-body-crashes-next-ai-draw-io-mcp-sidecar 2026-10-01T15:10:49.819558+00:00 0.5 https://theagentictimes.org/incidents/paperclip-ai-agent-orchestrator-unauthenticated-and-agent-key-rce-flaws-cve-2026 2026-10-01T15:10:50.22299+00:00 0.5 https://theagentictimes.org/incidents/anythingllm-stored-xss-via-unsanitised-chart-captions-cve-2026-41318 2026-10-01T15:10:50.347725+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-33102-open-redirect-in-microsoft-365-copilot-enables-privilege-elevatio 2026-10-01T15:10:50.347884+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-41349-openclaw-agentic-consent-bypass-via-config-patch 2026-10-01T15:10:50.37955+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-joecastrom-mcp-chat-studio-llm-models-api-cve-2026-7147 2026-10-01T15:10:50.970352+00:00 0.5 https://theagentictimes.org/incidents/headroom-websocket-server-vulnerable-to-cross-site-hijacking-cve-2026-71416 2026-10-02T23:55:52.558494+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-dh1011-auto-favicon-mcp-server-tool-cve-2026-7150 2026-10-01T15:10:51.059804+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-dmitryglhf-mcp-url-downloader-mcp-server-cve-2026-7158 2026-10-01T15:10:51.069677+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-tencent-cloudbase-mcp-open-url-endpoint-cve-2026-7221 2026-10-01T15:10:51.371325+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-7417-ssrf-in-algovate-xhs-mcp-mcp-server-publish-tool 2026-10-01T15:10:51.393779+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-30635-command-injection-in-automagik-genie-2-5-27-mcp-server 2026-10-01T15:10:53.38061+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-42869-hardcoded-jwt-secret-in-socfortress-copilot-allows-admin-token-fo 2026-10-01T15:10:53.697662+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-42260-ssrf-in-open-websearch-mcp-server-url-safety-checks 2026-10-01T15:10:54.10354+00:00 0.5 https://theagentictimes.org/incidents/siyuan-mcp-tool-vulnerabilities-in-versions-3-8-0 2026-10-02T23:56:53.109089+00:00 0.5 https://theagentictimes.org/incidents/evolver-ai-agent-engine-path-traversal-command-injection-and-prototype-pollution 2026-10-01T15:10:51.736145+00:00 0.5 https://theagentictimes.org/incidents/pptagent-code-execution-and-arbitrary-file-write-flaws-patched-cve-2026-42078-79 2026-10-01T15:10:51.808104+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-43901-wireshark-mcp-server-allows-arbitrary-export-path-via-unsandboxed 2026-10-01T15:10:54.005478+00:00 0.5 https://theagentictimes.org/incidents/junoclaw-agentic-ai-platform-patches-three-mcp-tool-vulnerabilities 2026-10-01T15:10:54.425278+00:00 0.5 https://theagentictimes.org/incidents/junoclaw-agent-platform-shell-command-injection-and-ssrf-flaws-cve-2026-43990-43 2026-10-01T15:10:54.604477+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-42045-lobechat-artifact-xss-chains-to-arbitrary-command-execution 2026-10-01T15:10:54.850097+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-75062-eval-injection-in-google-langfun 2026-10-01T15:11:19.793791+00:00 0.5 https://theagentictimes.org/incidents/aws-bedrock-agentcore-flaw-let-attackers-steal-credentials-via-ssrf 2026-10-09T22:44:03.026611+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-35228-oracle-mcp-server-helper-tool-flaw-allows-malicious-sql-execution 2026-10-01T15:10:52.004186+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-3456-sql-injection-in-wordpress-geekybot-ai-chatbot-plugin 2026-10-01T15:10:52.121329+00:00 0.5 https://theagentictimes.org/incidents/four-unpatched-cves-in-langchain-chatchat-file-apis-exploits-public 2026-10-01T15:10:52.430445+00:00 0.5 https://theagentictimes.org/incidents/sqlbot-text2sql-prompt-injection-enables-arbitrary-sql-execution-and-rce-cve-202 2026-10-01T15:10:52.511816+00:00 0.5 https://theagentictimes.org/incidents/multiple-openclaw-mcp-and-gateway-vulnerabilities-patched-cve-2026-44118-44995-4 2026-10-01T15:10:52.663526+00:00 0.5 https://theagentictimes.org/incidents/microsoft-discloses-multiple-copilot-injection-and-access-control-cves-may-2026 2026-10-01T15:10:52.765364+00:00 0.5 https://theagentictimes.org/incidents/ai-discovered-rejetto-hfs-auth-bypass-flaw-exploited-in-the-wild 2026-10-03T16:28:31.596028+00:00 0.5 https://theagentictimes.org/incidents/prompthub-ssrf-via-ipv6-bypass-in-skills-fetch-remote-endpoint-cve-2026-42261 2026-10-01T15:10:53.027797+00:00 0.5 https://theagentictimes.org/incidents/litellm-mcp-preview-endpoints-allow-authenticated-users-to-run-commands-on-proxy 2026-10-01T15:10:53.05366+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-31246-command-injection-in-gpt-pilot-executor-run-enables-rce 2026-10-01T15:10:53.482565+00:00 0.5 https://theagentictimes.org/incidents/deepchat-cve-2026-43899-external-url-handler-bypass-enables-code-execution 2026-10-01T15:10:53.694605+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-8319-remote-resource-exhaustion-in-aiwaves-cn-agents-memory-recall-func 2026-10-01T15:10:53.805365+00:00 0.5 https://theagentictimes.org/incidents/unauthenticated-rce-in-code-runner-mcp-server-http-transport-cve-2026-5029 2026-10-01T15:10:54.206032+00:00 0.5 https://theagentictimes.org/incidents/anthropic-ai-agents-submitted-incomplete-visa-forms-on-state-dept-site 2026-10-10T06:00:27.575436+00:00 0.5 https://theagentictimes.org/incidents/south-korea-probes-bank-breaches-amid-suspected-ai-powered-attacks 2026-10-05T14:51:23.465633+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44220-ciguard-symlink-traversal-exposes-files-outside-scan-root 2026-10-01T15:10:54.915687+00:00 0.5 https://theagentictimes.org/incidents/langflow-path-traversal-in-knowledge-bases-api-allows-arbitrary-directory-deleti 2026-10-01T15:10:55.056165+00:00 0.5 https://theagentictimes.org/incidents/vercel-cli-leaked-auth-tokens-in-ai-agent-non-interactive-command-output-cve-202 2026-10-01T15:10:55.136513+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44246-prompt-injection-in-nnu-net-github-issue-triage-agent-workflow 2026-10-01T15:10:55.205453+00:00 0.5 https://theagentictimes.org/incidents/microsoft-apm-agent-dependency-manager-path-traversal-and-symlink-flaws-3-cves 2026-10-01T15:10:55.746676+00:00 0.5 https://theagentictimes.org/incidents/hatchet-cross-tenant-data-exposure-via-missing-authorization-cve-2026-42572 2026-10-01T15:10:56.108032+00:00 0.5 https://theagentictimes.org/incidents/langflow-multiple-code-execution-vulnerabilities 2026-10-05T22:44:16.376772+00:00 0.5 https://theagentictimes.org/incidents/langflow-weak-fernet-key-via-random-seed 2026-10-05T22:45:10.718671+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44717-rce-in-mcp-calculate-server-via-unsanitized-eval 2026-10-01T15:10:55.804795+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-45401-ssrf-via-unvalidated-redirects-in-open-webui-web-retrieval 2026-10-01T15:10:55.955314+00:00 0.5 https://theagentictimes.org/incidents/command-injection-flaws-in-microsoft-copilot-and-m365-copilot-cve-2026-41090-cve 2026-10-01T15:10:56.135249+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44209-ssti-to-rce-in-banks-llm-prompt-template-library 2026-10-01T15:10:56.435158+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44450-lumiverse-mcp-server-endpoint-allows-authenticated-remote-code-ex 2026-10-01T15:10:56.630706+00:00 0.5 https://theagentictimes.org/incidents/mcp-server-kubernetes-access-controls-bypassable-at-tool-execution-layer-cve-202 2026-10-01T15:10:58.944002+00:00 0.5 https://theagentictimes.org/incidents/langchain-and-langsmith-sdk-unsafe-deserialization-of-untrusted-serialized-objec 2026-10-01T15:10:56.766799+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44895-gitlab-mcp-server-http-transport-exposes-unauthenticated-rpc-endp 2026-10-01T15:10:56.847347+00:00 0.5 https://theagentictimes.org/incidents/gryph-ai-coding-agent-security-layer-logs-sensitive-file-content-cve-2026-45046 2026-10-01T15:10:56.978867+00:00 0.5 https://theagentictimes.org/incidents/anythingllm-agent-filesystem-skills-allow-command-execution-and-path-escape 2026-10-01T15:10:57.146545+00:00 0.5 https://theagentictimes.org/incidents/jqwik-library-contained-hidden-prompt-injection-telling-ai-coding-agents-to-dele 2026-10-01T15:10:57.491558+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-45312-ragflow-jinja2-template-injection-enables-remote-code-execution 2026-10-01T15:10:57.680812+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-45555-rce-in-roslyn-codelens-mcp-server-via-unchecked-analyzer-dll-load 2026-10-01T15:10:57.693507+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-108583-zotero-mcp-ssrf-vulnerability-via-prompt-injection 2026-10-10T18:42:00.195092+00:00 0.5 https://theagentictimes.org/incidents/pyjwt-accepts-inconsistent-okp-jwks-allowing-key-identity-confusion 2026-10-06T06:31:47.664573+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-ssrf-and-code-sandbox-escape-flaws-fixed-in-4-15-0-beta1 2026-10-01T15:10:58.010622+00:00 0.5 https://theagentictimes.org/incidents/n8n-mcp-flaws-leak-telemetry-data-and-misroute-multi-tenant-n8n-api-calls 2026-10-01T15:10:58.223072+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-42073-openclaude-mcp-oauth-state-check-bypass-allows-callback-server-sh 2026-10-01T15:10:58.374596+00:00 0.5 https://theagentictimes.org/incidents/librechat-mcp-integration-flaws-leak-server-secrets-and-allow-cross-agent-file-d 2026-10-01T15:10:58.536856+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-45482-path-traversal-in-github-copilot-and-visual-studio-code 2026-10-01T15:10:58.825535+00:00 0.5 https://theagentictimes.org/incidents/simple-git-command-execution-via-git-config-include-path 2026-10-06T06:32:48.055758+00:00 0.5 https://theagentictimes.org/incidents/two-claude-code-vulnerabilities-world-readable-copy-output-and-worktree-sandbox- 2026-10-01T15:11:04.018936+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-13437-app-tokens-leaked-via-ai-agent-job-api-in-devolutions-powershell- 2026-10-01T15:11:04.37622+00:00 0.5 https://theagentictimes.org/incidents/fast-mcp-telegram-mcp-server-auth-bypass-via-path-traversal-in-bearer-token-cve- 2026-10-01T15:11:04.632538+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-41106-open-redirect-in-m365-copilot-enables-privilege-elevation 2026-10-01T15:11:05.166078+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-14742-weak-hash-in-langgraph-task-result-cache-key 2026-10-01T15:11:05.235203+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-13341-indirect-prompt-injection-in-kong-konnect-mcp-server 2026-10-01T15:11:05.712672+00:00 0.5 https://theagentictimes.org/incidents/mcp-for-stata-command-injection-via-log-file-name-parameter 2026-10-01T15:11:08.324322+00:00 0.5 https://theagentictimes.org/incidents/vllm-cache-salt-dropped-in-harmony-tool-continuations 2026-10-06T06:33:42.132151+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-12203-unauthenticated-data-exposure-in-hkuds-ai-trader-research-export 2026-10-01T15:10:59.27343+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-53840-openclaw-leaks-custom-headers-via-mcp-cross-origin-redirects 2026-10-01T15:10:59.674823+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-20265-splunk-ai-toolkit-allowlist-flaw-enables-agent-data-exfiltration 2026-10-01T15:10:59.805723+00:00 0.5 https://theagentictimes.org/incidents/network-ai-mcp-sse-server-unauthenticated-by-default-cve-2026-48814 2026-10-01T15:10:59.989145+00:00 0.5 https://theagentictimes.org/incidents/windows-mcp-unauthenticated-http-control-plane-allowed-arbitrary-powershell-exec 2026-10-01T15:11:00.112626+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-11719-scope-enforcement-bypass-in-mcp-toolbox-for-databases 2026-10-01T15:11:00.126367+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-49257-mcp-pinot-mcp-server-exposes-unauthenticated-pinot-access 2026-10-01T15:11:00.523861+00:00 0.5 https://theagentictimes.org/incidents/researcher-finds-kvm-zero-day-vm-escape-via-vercel-bug-bounty 2026-10-06T06:34:00.951208+00:00 0.5 https://theagentictimes.org/incidents/mini-swe-agent-environment-variable-exposure-via-prompt-injection 2026-10-10T23:37:55.832284+00:00 0.5 https://theagentictimes.org/incidents/multiple-microsoft-copilot-vulnerabilities-disclosed-including-workspace-escape- 2026-10-01T15:11:00.491934+00:00 0.5 https://theagentictimes.org/incidents/praisonai-flaw-lets-agents-run-arbitrary-shell-commands-via-forced-auto-approval 2026-10-01T15:11:00.823296+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-12045-pgadmin-4-ai-assistant-read-only-transaction-bypass-via-prompt-in 2026-10-01T15:11:00.915357+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-10564-ssrf-in-ibm-langflow-oss-rss-and-searxng-components 2026-10-01T15:11:04.498704+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-9132-github-enterprise-server-copilot-diff-endpoint-exposed-private-rep 2026-10-01T15:11:04.512375+00:00 0.5 https://theagentictimes.org/incidents/openclaw-channel-read-actions-bypass-allowlists 2026-10-06T06:29:46.605203+00:00 0.5 https://theagentictimes.org/incidents/gin-vue-admin-2-9-1-code-generation-mcp-flaw-allows-remote-code-execution-cve-20 2026-10-01T15:11:01.167727+00:00 0.5 https://theagentictimes.org/incidents/multiple-remote-code-execution-flaws-in-flowise-ai-agent-builder-platform 2026-10-01T15:11:01.343858+00:00 0.5 https://theagentictimes.org/incidents/two-ssrf-vulnerabilities-in-berriai-litellm-mcp-server-components-1-82-2 2026-10-01T15:11:01.474218+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-66336-sql-injection-and-authorization-bypass-in-apache-doris-mcp-server 2026-10-01T15:11:01.710669+00:00 0.5 https://theagentictimes.org/incidents/multiple-langflow-vulnerabilities-unauthenticated-rce-idor-and-path-traversal 2026-10-01T15:11:01.738217+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-55443-langchain-path-traversal-allows-file-disclosure-outside-intended- 2026-10-01T15:11:02.058023+00:00 0.5 https://theagentictimes.org/incidents/github-copilot-cli-vulnerable-to-encrypted-prompt-injection-attack-cci 2026-10-06T15:17:31.678893+00:00 0.5 https://theagentictimes.org/incidents/symlink-vulnerabilities-in-phi-and-open-multi-agent-frameworks 2026-10-10T23:38:43.356073+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-54316-claude-code-webfetch-allowlist-enabled-covert-data-exfiltration 2026-10-01T15:11:02.204646+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-12112-session-hijacking-flaw-in-foreman-mcp-server-enables-privilege-es 2026-10-01T15:11:02.502478+00:00 0.5 https://theagentictimes.org/incidents/jenkins-mcp-server-plugin-missing-permission-check-exposes-pipeline-replay-scrip 2026-10-01T15:11:02.749922+00:00 0.5 https://theagentictimes.org/incidents/twenty-crm-ai-agent-monitor-idor-exposed-cross-workspace-chat-history-cve-2026-5 2026-10-01T15:11:02.916901+00:00 0.5 https://theagentictimes.org/incidents/ai-agents-reportedly-used-to-hack-south-korean-banks 2026-10-06T21:03:41.6665+00:00 0.5 https://theagentictimes.org/incidents/librechat-agent-file-upload-authorization-bypass-and-mcp-oauth-token-theft-flaws 2026-10-01T15:11:03.016661+00:00 0.5 https://theagentictimes.org/incidents/cursor-sandbox-escape-flaws-cve-2026-50548-50549-allow-writes-outside-workspace 2026-10-01T15:11:03.246254+00:00 0.5 https://theagentictimes.org/incidents/mattermost-agents-mcp-server-ssrf-allows-internal-data-exfiltration-cve-2026-433 2026-10-01T15:11:03.445083+00:00 0.5 https://theagentictimes.org/incidents/flowise-custom-mcp-env-var-denylist-bypass-enables-rce-cve-2026-58057 2026-10-01T15:11:03.626948+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-48529-github-mcp-server-shares-first-users-credentials-in-lockdown-mode 2026-10-01T15:11:03.790377+00:00 0.5 https://theagentictimes.org/incidents/autogpt-denial-of-service-flaw-in-aitextsummarizerblock-cve-2025-32394 2026-10-01T15:11:03.792766+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-58168-deeptutor-authorization-bypass-grants-unrestricted-mcp-tool-acces 2026-10-01T15:11:04.539629+00:00 0.5 https://theagentictimes.org/incidents/langchain-redisearch-filter-injection-vulnerability 2026-10-06T21:04:30.658404+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-aianytime-awesome-mcp-server-wiki-summary-tool-cve-2026-14748 2026-10-01T15:11:05.529608+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44934-suse-rancher-ai-agent-leaks-api-keys-in-debug-logs 2026-10-01T15:11:05.540787+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-14898-codex-macos-app-image-rendering-enables-prompt-injection-data-exf 2026-10-01T15:11:05.881611+00:00 0.5 https://theagentictimes.org/incidents/researchers-trick-githubs-ai-coding-agent-into-leaking-private-repositories 2026-10-01T15:11:05.885848+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-59807-composio-sdk-path-validation-bypass-enables-credential-file-exfil 2026-10-01T15:11:06.067328+00:00 0.5 https://theagentictimes.org/incidents/litellm-mcp-endpoint-authentication-bypass-via-forged-authorization-header-cve-2 2026-10-01T15:11:06.238787+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-15189-ssrf-in-aerostack-mcp-whatsapp-mcp-upload-media-tool 2026-10-01T15:11:06.394668+00:00 0.5 https://theagentictimes.org/incidents/payload-cms-mcp-plugin-improper-access-control-vulnerability 2026-10-06T21:05:20.633647+00:00 0.5 https://theagentictimes.org/incidents/dbt-mcp-argument-injection-and-data-leak-vulnerabilities 2026-10-01T15:11:06.808353+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-58195-agentic-flow-command-injection-via-mcp-server-tools 2026-10-01T15:11:07.216658+00:00 0.5 https://theagentictimes.org/incidents/ai-copilot-wordpress-plugin-oauth-token-binding-vulnerability 2026-10-01T15:11:07.302368+00:00 0.5 https://theagentictimes.org/incidents/forgecode-automatically-executes-arbitrary-commands-from-malicious-mcp-json 2026-10-01T15:11:07.429932+00:00 0.5 https://theagentictimes.org/incidents/ibm-langflow-oss-code-injection-via-toolguard-integration 2026-10-01T15:11:07.637891+00:00 0.5 https://theagentictimes.org/incidents/network-ai-mcp-sse-server-missing-authentication 2026-10-01T15:11:07.845984+00:00 0.5 https://theagentictimes.org/incidents/nono-sandbox-escape-via-unix-domain-socket-access 2026-10-01T15:11:08.004908+00:00 0.5 https://theagentictimes.org/incidents/apify-mcp-server-url-validation-bypass 2026-10-01T15:11:08.175583+00:00 0.5 https://theagentictimes.org/incidents/abilityai-trinity-missing-authorization-in-telegram-router 2026-10-11T18:59:15.681041+00:00 0.5 https://theagentictimes.org/incidents/nextcrm-mcp-api-missing-role-checks-in-product-operations 2026-10-01T15:11:08.331803+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-ansible-lightspeed-mcp-server-via-prompt-injection 2026-10-01T15:11:08.687472+00:00 0.5 https://theagentictimes.org/incidents/mcp-webresearch-0-1-7-ssrf-vulnerability-via-llm-prompt-injection 2026-10-01T15:11:08.703522+00:00 0.5 https://theagentictimes.org/incidents/n8n-privilege-escalation-and-oauth-authorization-vulnerabilities 2026-10-01T15:11:08.866888+00:00 0.5 https://theagentictimes.org/incidents/void-path-traversal-in-ai-agent-file-reading-tools 2026-10-01T15:11:09.053563+00:00 0.5 https://theagentictimes.org/incidents/apifold-webhook-endpoint-accepts-unauthenticated-arbitrary-json 2026-10-01T15:11:09.208715+00:00 0.5 https://theagentictimes.org/incidents/blendermcp-path-traversal-vulnerability-in-download-polyhaven-asset 2026-10-01T15:11:09.333266+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-50517-unsafe-deserialization-in-m365-copilot 2026-10-01T15:11:09.363894+00:00 0.5 https://theagentictimes.org/incidents/agentgpt-authorization-bypass-allows-unauthorized-task-attachment 2026-10-01T15:11:12.250898+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-66012-siyuan-missing-authorization-in-mcp-kernel-endpoint 2026-10-01T15:11:09.904534+00:00 0.5 https://theagentictimes.org/incidents/suna-message-queue-api-broken-access-control-vulnerability 2026-10-01T15:11:09.907666+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-17433-improper-authorization-in-nanocoai-nanoclaw 2026-10-01T15:11:10.066242+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-9680-alibabacloud-rds-openapi-mcp-server-exposed 2026-10-01T15:11:10.308783+00:00 0.5 https://theagentictimes.org/incidents/pydantic-ai-multiple-vulnerabilities-in-versions-1-56-0-2-0-0b5 2026-10-01T15:11:11.204622+00:00 0.5 https://theagentictimes.org/incidents/better-auth-redirect-uri-validation-bypass-enables-xss 2026-10-01T15:11:11.363531+00:00 0.5 https://theagentictimes.org/incidents/mcp-ruby-sdk-memory-exhaustion-via-unbounded-session-objects 2026-10-01T15:11:11.444981+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-18655-amazon-mq-mcp-server-prompt-injection-vulnerability 2026-10-01T15:11:12.018779+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19753-ssrf-in-mcp-rdf-explorer 2026-10-01T15:11:15.562946+00:00 0.5 https://theagentictimes.org/incidents/knowns-lsp-os-command-injection-via-malicious-config-json 2026-10-06T21:06:17.443504+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-18394-incorrect-authorization-in-strands-agents-tools-http-request 2026-10-01T15:11:11.408594+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-67357-arcadedb-mcp-information-disclosure-vulnerability 2026-10-01T15:11:11.4804+00:00 0.5 https://theagentictimes.org/incidents/ouroboros-ai-coding-agent-local-code-execution-via-env-loading 2026-10-01T15:11:12.020342+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-amazon-strands-agents-tools 2026-10-01T15:11:12.168761+00:00 0.5 https://theagentictimes.org/incidents/ibm-langflow-oss-multiple-vulnerabilities-cve-2026-17623-et-al 2026-10-01T15:11:12.393362+00:00 0.5 https://theagentictimes.org/incidents/multiple-authorization-vulnerabilities-in-microsoft-copilot-products 2026-10-01T15:11:12.877669+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19039-command-injection-in-kino-kafkaesque-ssh-mcp-server 2026-10-01T15:11:12.890687+00:00 0.5 https://theagentictimes.org/incidents/n8n-mcp-client-ssrf-protection-bypass 2026-10-01T15:11:14.100052+00:00 0.5 https://theagentictimes.org/incidents/mac-shell-mcp-os-command-injection-via-shell-metacharacters 2026-10-12T15:38:23.816808+00:00 0.5 https://theagentictimes.org/incidents/flyto2-core-ssrf-vulnerability-in-http-modules 2026-10-01T15:11:10.62827+00:00 0.5 https://theagentictimes.org/incidents/flowise-supply-chain-and-prompt-injection-vulnerabilities 2026-10-01T15:11:12.198661+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19040-server-side-request-forgery-in-missionsquad-mcp-api 2026-10-01T15:11:12.871043+00:00 0.5 https://theagentictimes.org/incidents/frontmcp-sandbox-escape-via-zod-schema-proxy-invariant 2026-10-01T15:11:13.010732+00:00 0.5 https://theagentictimes.org/incidents/meta-ads-mcp-authentication-bypass-and-token-leakage 2026-10-01T15:11:13.240643+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19263-command-injection-in-inquirelab-mcp-bridge-api 2026-10-01T15:11:13.566473+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-72718-goose-ai-agent-arbitrary-command-execution-via-git-config 2026-10-01T15:11:13.61943+00:00 0.5 https://theagentictimes.org/incidents/agenticseek-unauthenticated-remote-code-execution-vulnerability 2026-10-01T15:11:15.499348+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-49986-cortex-mcp-arbitrary-code-execution-via-environment-variable 2026-10-01T15:11:16.105782+00:00 0.5 https://theagentictimes.org/incidents/openai-rogue-agents-found-editing-and-probing-wikimedia-sites 2026-10-07T01:38:07.359778+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19337-server-side-request-forgery-in-mcp-google-search 2026-10-01T15:11:13.760889+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19516-server-side-request-forgery-in-mcp-grafana 2026-10-01T15:11:13.798613+00:00 0.5 https://theagentictimes.org/incidents/tooljet-authorization-bypass-allows-cross-organization-data-access 2026-10-01T15:11:13.942883+00:00 0.5 https://theagentictimes.org/incidents/cursor-ide-macos-sandbox-escapes-in-auto-run-mode 2026-10-01T15:11:14.546047+00:00 0.5 https://theagentictimes.org/incidents/mcp-memory-service-authentication-bypass-in-document-endpoints 2026-10-01T15:11:16.025731+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19984-ssrf-in-jkawamoto-mcp-florence2 2026-10-01T15:11:16.375043+00:00 0.5 https://theagentictimes.org/incidents/mlflow-multiple-vulnerabilities-in-versions-prior-to-3-15-0 2026-10-01T15:11:16.614474+00:00 0.5 https://theagentictimes.org/incidents/apify-mcp-server-api-token-exposure-via-url-redirection 2026-10-01T15:11:17.198212+00:00 0.5 https://theagentictimes.org/incidents/command-injection-and-ssrf-vulnerabilities-in-microsoft-copilot 2026-10-01T15:11:17.256775+00:00 0.5 https://theagentictimes.org/incidents/cyberxero-uses-claude-code-to-steal-628-000-ukrainian-records 2026-10-12T15:37:09.160817+00:00 0.5 https://theagentictimes.org/incidents/mcp-atlassian-arbitrary-file-read-vulnerability 2026-10-01T15:11:14.549989+00:00 0.5 https://theagentictimes.org/incidents/hcl-aion-indirect-prompt-injection-leading-to-html-injection 2026-10-01T15:11:14.802003+00:00 0.5 https://theagentictimes.org/incidents/jshookmcp-jshook-ssrf-bypass-via-icmp-and-traceroute-tools 2026-10-01T15:11:15.169144+00:00 0.5 https://theagentictimes.org/incidents/auth-fetch-mcp-ssrf-protection-bypass-via-ipv6-loopback 2026-10-01T15:11:15.314764+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-trigger-dev-platform 2026-10-01T15:11:15.314974+00:00 0.5 https://theagentictimes.org/incidents/prompt-injection-hidden-in-legal-filing-to-manipulate-ai-review 2026-10-01T15:11:15.526063+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-ckan-mcp-server-prior-to-0-4-112 2026-10-01T15:11:16.022694+00:00 0.5 https://theagentictimes.org/incidents/mindsdb-minds-platform-unauthenticated-rce-via-scratchpad-tool 2026-10-01T15:11:16.346095+00:00 0.5 https://theagentictimes.org/incidents/arcadedb-authorization-bypass-in-set-server-setting-mcp-tool 2026-10-01T15:11:16.772487+00:00 0.5 https://theagentictimes.org/incidents/codewhale-multiple-vulnerabilities-in-versions-0-8-41-0-8-63 2026-10-01T15:11:17.128578+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-75130-context7-prompt-injection-via-custom-ai-instructions 2026-10-01T15:11:17.203937+00:00 0.5 https://theagentictimes.org/incidents/marimo-code-injection-via-mcp-server-configuration 2026-10-01T15:11:17.280523+00:00 0.5 https://theagentictimes.org/incidents/splunk-ai-toolkit-privilege-escalation-and-mcp-server-command-execution 2026-10-01T15:11:17.606779+00:00 0.5 https://theagentictimes.org/incidents/agno-pythontools-path-traversal-vulnerability-cve-2026-76832 2026-10-01T15:11:17.930459+00:00 0.5 https://theagentictimes.org/incidents/ai-agent-by-siteground-wordpress-plugin-authorization-bypass 2026-10-01T15:11:17.937151+00:00 0.5 https://theagentictimes.org/incidents/neo-mjs-command-injection-in-filesystemservice-mjs 2026-10-01T15:11:17.949388+00:00 0.5 https://theagentictimes.org/incidents/langbot-mcp-server-rce-via-insufficient-authorization 2026-10-01T15:11:18.026776+00:00 0.5 https://theagentictimes.org/incidents/nginx-ui-mcp-tool-bypasses-configuration-validation 2026-10-12T23:03:36.826112+00:00 0.5 https://theagentictimes.org/incidents/unpatched-critical-rce-flaw-found-in-lmcache-llm-caching-server 2026-10-07T17:34:15.55631+00:00 0.5 https://theagentictimes.org/incidents/infracost-symlink-traversal-and-token-disclosure-vulnerabilities 2026-10-01T15:11:18.458895+00:00 0.5 https://theagentictimes.org/incidents/mcp-shell-multiple-command-execution-vulnerabilities 2026-10-01T15:11:18.665911+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-55529-praisonai-origin-validation-bypass 2026-10-01T15:11:18.693552+00:00 0.5 https://theagentictimes.org/incidents/browse-mcp-path-traversal-and-arbitrary-file-write 2026-10-01T15:11:18.859557+00:00 0.5 https://theagentictimes.org/incidents/nextcloud-mcp-server-unauthenticated-webhook-endpoint-allows-index-deletion 2026-10-01T15:11:19.017241+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-55637-genieacs-mcp-dns-rebinding-vulnerability 2026-10-01T15:11:19.30476+00:00 0.5 https://theagentictimes.org/incidents/prompt-injection-in-amazon-strands-agents-tools-python-repl 2026-10-01T15:11:19.49347+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-sublinear-time-solver-and-consciousness-explorer 2026-10-01T15:11:19.495593+00:00 0.5 https://theagentictimes.org/incidents/mcp-php-sdk-memory-exhaustion-vulnerability 2026-10-01T15:11:19.760107+00:00 0.5 https://theagentictimes.org/incidents/gitlab-ai-gateway-credential-disclosure-vulnerabilities 2026-10-01T15:11:20.209598+00:00 0.5 https://theagentictimes.org/incidents/mcp-go-http-host-header-validation-vulnerability 2026-10-01T15:11:20.244002+00:00 0.5 https://theagentictimes.org/incidents/mcp-router-cli-exposed-mcp-aggregator-without-authentication-by-default 2026-10-01T15:11:20.362896+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-81096-tooluniverse-sandbox-escape-and-unauthenticated-rce 2026-10-01T15:11:20.904887+00:00 0.5 https://theagentictimes.org/incidents/dash-mcp-server-dns-rebinding-via-missing-host-header-validation 2026-10-01T15:11:21.084326+00:00 0.5 https://theagentictimes.org/incidents/servicenow-ai-platform-code-injection-and-sql-injection-vulnerabilities 2026-10-01T15:11:21.802337+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-microsoft-copilot-products 2026-10-01T15:11:22.023096+00:00 0.5 https://theagentictimes.org/incidents/siyuan-path-traversal-and-path-guard-bypass-vulnerabilities 2026-10-01T15:11:22.127823+00:00 0.5 https://theagentictimes.org/incidents/dns-rebinding-vulnerability-in-timescale-mcp-tools 2026-10-01T15:11:20.555021+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-81093-apify-mcp-server-ssrf-in-get-html-skeleton-tool 2026-10-01T15:11:20.862505+00:00 0.5 https://theagentictimes.org/incidents/ui-tars-desktop-mcp-servers-bind-to-all-interfaces-without-authentication 2026-10-01T15:11:21.256282+00:00 0.5 https://theagentictimes.org/incidents/telnyx-mcp-server-missing-authentication-on-http-transport 2026-10-01T15:11:21.405925+00:00 0.5 https://theagentictimes.org/incidents/hatchet-dispatcher-grpc-service-missing-tenant-verification 2026-10-01T15:11:21.782162+00:00 0.5 https://theagentictimes.org/incidents/agno-remote-code-execution-via-prompt-injection 2026-10-01T15:11:21.993581+00:00 0.5 https://theagentictimes.org/incidents/origin-validation-error-in-ash-ai-mcp-server-allows-dns-rebinding-attacks 2026-10-01T15:11:22.135974+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-82905-ssrf-in-sdcb-chats-mcpcontroller 2026-10-01T15:11:22.644465+00:00 0.5 https://theagentictimes.org/incidents/appium-mcp-server-path-traversal-in-file-write-tools 2026-10-01T15:11:22.921219+00:00 0.5 https://theagentictimes.org/incidents/meta-researchers-ai-agent-accidentally-deleted-her-emails 2026-10-01T15:11:22.930291+00:00 0.5 https://theagentictimes.org/incidents/roo-code-command-approval-bypass-vulnerabilities-cve-2026-110202-through-cve-202 2026-10-13T21:21:29.648179+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-nousresearch-hermes-agent 2026-10-01T15:11:23.39351+00:00 0.5 https://theagentictimes.org/incidents/claude-skill-antivirus-fails-to-analyze-executable-files-in-skill-directories 2026-10-01T15:11:23.730237+00:00 0.5 https://theagentictimes.org/incidents/multiple-dos-vulnerabilities-in-zhayujie-cowagent 2026-10-01T15:11:23.877029+00:00 0.5 https://theagentictimes.org/incidents/ntegrals-openbrowser-browser-agent-message-construction-dos 2026-10-01T15:11:23.95022+00:00 0.5 https://theagentictimes.org/incidents/ckan-mcp-server-multiple-security-vulnerabilities-in-allowlist-and-cache 2026-10-01T15:11:23.977218+00:00 0.5 https://theagentictimes.org/incidents/openchoreo-unauthenticated-cluster-gateway-management-api-access 2026-10-01T15:11:23.986322+00:00 0.5 https://theagentictimes.org/incidents/avideo-api-rate-limit-bypass-via-bot-user-agent-header 2026-10-01T15:11:28.737542+00:00 0.5 https://theagentictimes.org/incidents/agent-squad-resource-exhaustion-vulnerability-in-streaming 2026-10-01T15:11:24.57067+00:00 0.5 https://theagentictimes.org/incidents/ckan-mcp-server-information-disclosure-via-verbose-error-reflection 2026-10-01T15:11:24.754975+00:00 0.5 https://theagentictimes.org/incidents/cheshire-cat-ai-memory-endpoint-lacks-per-user-filtering 2026-10-01T15:11:24.848867+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-simular-ai-agent-s 2026-10-01T15:11:24.937367+00:00 0.5 https://theagentictimes.org/incidents/langgenius-dify-xss-via-redirect-url-parameter-in-splash-layout 2026-10-01T15:11:25.069281+00:00 0.5 https://theagentictimes.org/incidents/helicone-vault-key-exposure-via-inadequate-org-validation 2026-10-01T15:11:25.267667+00:00 0.5 https://theagentictimes.org/incidents/missing-authorization-in-mountdev-ai-mcp-connector-for-wordpress 2026-10-01T15:11:25.794424+00:00 0.5 https://theagentictimes.org/incidents/orval-multiple-rce-vulnerabilities-in-code-generation 2026-10-01T15:11:26.002203+00:00 0.5 https://theagentictimes.org/incidents/visual-studio-copilot-rce-vulnerability-patched-cve-2026-103572 2026-10-14T01:17:45.104692+00:00 0.5 https://theagentictimes.org/incidents/aider-arbitrary-code-execution-via-malicious-aider-conf-yml 2026-10-01T15:11:27.421402+00:00 0.5 https://theagentictimes.org/incidents/agentscope-path-traversal-vulnerability-in-localworkspace-add-skill 2026-10-01T15:11:27.423986+00:00 0.5 https://theagentictimes.org/incidents/ssrf-vulnerability-in-owl-documentprocessingtoolkit 2026-10-01T15:11:27.565878+00:00 0.5 https://theagentictimes.org/incidents/command-injection-in-tianxi-ai-agent-pc-application 2026-10-01T15:11:30.760455+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-n8n-workflow-automation-platform 2026-10-01T15:11:24.748276+00:00 0.5 https://theagentictimes.org/incidents/nightingale-ssrf-vulnerability-in-http-fetch-ai-agent-tool 2026-10-01T15:11:28.092491+00:00 0.5 https://theagentictimes.org/incidents/lavague-0-2-35-remote-code-execution-via-prompt-injection 2026-10-01T15:11:28.293897+00:00 0.5 https://theagentictimes.org/incidents/codewhale-ssrf-bypass-via-dns-pinning-toctou 2026-10-01T15:11:28.295686+00:00 0.5 https://theagentictimes.org/incidents/command-injection-and-credential-exposure-in-github-copilot-and-visual-studio-co 2026-10-01T15:11:29.261446+00:00 0.5 https://theagentictimes.org/incidents/lobechat-webhook-signature-verification-bypass-in-qq-and-feishu-adapters 2026-10-01T15:11:27.034156+00:00 0.5 https://theagentictimes.org/incidents/actual-sync-server-cors-proxy-github-api-allowlist-bypass 2026-10-07T17:32:57.043885+00:00 0.5 https://theagentictimes.org/incidents/broken-access-control-in-agentimus-ai-seo-plugin 2026-10-01T15:11:25.468196+00:00 0.5 https://theagentictimes.org/incidents/kp-agent-ready-sensitive-data-insertion-vulnerability 2026-10-01T15:11:25.78341+00:00 0.5 https://theagentictimes.org/incidents/hermes-agent-rce-via-malicious-git-config 2026-10-01T15:11:25.802474+00:00 0.5 https://theagentictimes.org/incidents/ssrf-vulnerability-in-unstructured-library-url-handling 2026-10-01T15:11:25.864051+00:00 0.5 https://theagentictimes.org/incidents/ogx-unauthenticated-server-side-request-forgery-via-mcp-tool 2026-10-01T15:11:26.176795+00:00 0.5 https://theagentictimes.org/incidents/postgres-mcp-pro-0-3-0-restricted-mode-bypass-via-rangefunction 2026-10-01T15:11:26.507693+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-ibm-contextforge-and-langflow-oss 2026-10-01T15:11:26.584609+00:00 0.5 https://theagentictimes.org/incidents/git-mcp-server-argument-injection-in-git-tools 2026-10-01T15:11:26.842191+00:00 0.5 https://theagentictimes.org/incidents/llama-factory-ssrf-vulnerability-in-openai-api-handler 2026-10-01T15:11:27.581911+00:00 0.5 https://theagentictimes.org/incidents/praisonai-agentmail-webhook-signature-verification-bypass 2026-10-07T17:33:50.023082+00:00 0.5 https://theagentictimes.org/incidents/arbitrary-local-file-read-in-firecrawl-mcp-server-3-20-2 2026-10-01T15:11:26.624525+00:00 0.5 https://theagentictimes.org/incidents/xinference-unauthenticated-arbitrary-path-file-read-vulnerability 2026-10-01T15:11:27.678672+00:00 0.5 https://theagentictimes.org/incidents/xiaobei-webhook-endpoint-lacks-authentication-allows-ssrf-attacks 2026-10-01T15:11:27.893897+00:00 0.5 https://theagentictimes.org/incidents/ms-swift-4-5-2-ssrf-via-unvalidated-media-urls 2026-10-01T15:11:28.46846+00:00 0.5 https://theagentictimes.org/incidents/functype-mcp-server-rce-via-unsanitized-pnpm-install 2026-10-01T15:11:29.758926+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-amazon-aws-labs-mcp-servers 2026-10-01T15:11:28.679051+00:00 0.5 https://theagentictimes.org/incidents/eclipse-ankaios-wildcard-authorization-bypass-in-control-interface 2026-10-01T15:11:28.962269+00:00 0.5 https://theagentictimes.org/incidents/asus-control-center-express-agent-missing-authentication-vulnerability 2026-10-01T15:11:29.346997+00:00 0.5 https://theagentictimes.org/incidents/open-webui-vulnerabilities-allow-dos-and-message-tampering 2026-10-01T15:11:29.999645+00:00 0.5 https://theagentictimes.org/incidents/path-injection-in-n8n-elasticsearch-and-elasticsecurity-nodes 2026-10-01T15:11:30.515021+00:00 0.5 https://theagentictimes.org/incidents/poellm-malware-hides-c2-in-ai-poem-infects-3-000-ai-servers 2026-10-07T17:34:32.468704+00:00 0.5 https://theagentictimes.org/incidents/server-side-request-forgery-in-mcp-dominican-layer 2026-10-01T15:11:30.935602+00:00 0.5 https://theagentictimes.org/incidents/aws-security-agent-mcp-server-s3-bucket-ownership-verification-missing 2026-10-01T15:11:30.180863+00:00 0.5 https://theagentictimes.org/incidents/mcphub-oauth-2-0-authentication-bypass-vulnerability 2026-10-01T15:11:30.706037+00:00 0.5 https://theagentictimes.org/incidents/langchain-sitemaploader-ssrf-bypass-via-nested-sitemap-entries 2026-10-01T15:11:31.322651+00:00 0.5 https://theagentictimes.org/incidents/flowise-critical-vulnerabilities-rce-via-sandbox-escape-and-prompt-injection 2026-10-07T17:35:30.889586+00:00 0.5 https://theagentictimes.org/incidents/next-js-development-server-exposes-mcp-endpoint-to-csrf-attacks 2026-10-07T23:11:42.282576+00:00 0.5 https://theagentictimes.org/incidents/agentic-ai-attack-hits-australias-medicare-systems 2026-10-07T23:13:34.256784+00:00 0.5 https://theagentictimes.org/incidents/n8n-multiple-vulnerabilities-in-workflow-execution-and-access-control 2026-10-01T15:11:29.999212+00:00 0.5 https://theagentictimes.org/incidents/omniroute-rce-via-unauthenticated-post-api-acp-agents-endpoint 2026-10-01T15:11:30.406262+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-ibm-langflow-oss-1-0-0-1-11-5 2026-10-01T15:11:30.706037+00:00 0.5 https://theagentictimes.org/incidents/cli-mcp-server-command-allowlist-bypass-via-shell-operators 2026-10-01T15:11:31.274704+00:00 0.5 https://theagentictimes.org/incidents/rowboat-fails-to-validate-custom-mcp-server-and-webhook-urls 2026-10-01T15:11:31.424545+00:00 0.5 https://theagentictimes.org/incidents/new-rathat-android-malware-uses-ai-to-automate-device-control 2026-10-01T15:11:33.027759+00:00 0.5 https://theagentictimes.org/incidents/ai-coding-tool-reported-leaking-private-code-repositories 2026-10-01T15:11:38.392038+00:00 0.5 https://theagentictimes.org/incidents/x47-c-windows-botnet-weaponizes-xai-grok-api-for-persistence 2026-10-01T15:11:40.230069+00:00 0.5 https://theagentictimes.org/incidents/roo-code-auto-approve-bypass-vulnerabilities-in-shell-command-parsing 2026-10-01T15:11:29.740189+00:00 0.5 https://theagentictimes.org/incidents/okta-hyperdrive-agent-plugin-authentication-and-logging-vulnerabilities 2026-10-01T15:11:29.756876+00:00 0.5 https://theagentictimes.org/incidents/contentful-mcp-server-prompt-injection-via-network-options 2026-10-01T15:11:31.397077+00:00 0.5 https://theagentictimes.org/incidents/zereight-mcp-gitlab-multiple-safety-control-bypasses 2026-10-01T15:11:31.821384+00:00 0.5 https://theagentictimes.org/incidents/esphome-device-builder-auth-env-vars-rename-silently-disables-dashboard-authenti 2026-10-01T15:11:31.433131+00:00 0.5 https://theagentictimes.org/incidents/ai-agent-used-in-first-ai-aided-data-breach-reported-in-spain 2026-10-01T15:11:31.89839+00:00 0.5 https://theagentictimes.org/incidents/attacker-hijacks-ai-coding-assistant-spreads-shai-hulud-worm 2026-10-01T15:11:31.95001+00:00 0.5 https://theagentictimes.org/incidents/ai-agent-driven-data-breach-reported-to-spanish-regulator 2026-10-01T15:11:32.284108+00:00 0.5 https://theagentictimes.org/incidents/bragjack-attack-hijacks-browser-agentic-ai-assistants 2026-10-01T15:11:32.341649+00:00 0.5 https://theagentictimes.org/incidents/spains-aepd-receives-first-ai-powered-data-breach-report 2026-10-01T15:11:32.516801+00:00 0.5 https://theagentictimes.org/incidents/vllm-unauthenticated-audio-decompression-bomb-dos-in-v1-chat-completions 2026-10-01T15:11:32.70395+00:00 0.5 https://theagentictimes.org/incidents/research-shows-ai-agents-can-retrain-own-models-mid-task 2026-10-01T15:11:32.806888+00:00 0.5 https://theagentictimes.org/incidents/rmcp-unauthenticated-session-table-leak-dos-cve-2026-63128 2026-10-01T15:11:32.963908+00:00 0.5 https://theagentictimes.org/incidents/skipper-opa-body-authz-bypass-with-chunked-http-2-requests 2026-10-01T15:11:33.15188+00:00 0.5 https://theagentictimes.org/incidents/ai-powered-attack-campcampaign-targets-hundreds-of-online-retailers 2026-10-01T15:11:38.049747+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-34476-ssrf-via-sw-url-header-in-apache-skywalking-mcp 2026-10-01T15:10:47.583067+00:00 0.5 https://theagentictimes.org/incidents/zero-click-plugin4shell-rce-flaw-found-in-major-ai-coding-agents 2026-10-01T15:11:33.346223+00:00 0.5 https://theagentictimes.org/incidents/critical-orkes-conductor-rce-vulnerability-exploited-in-attacks 2026-10-01T15:11:33.644891+00:00 0.5 https://theagentictimes.org/incidents/ai-agent-used-to-breach-spanish-organization-alter-personal-data 2026-10-01T15:11:33.647747+00:00 0.5 https://theagentictimes.org/incidents/prompt-injection-flaw-in-aws-agentcore-harness-can-leak-credentials 2026-10-01T15:11:34.243359+00:00 0.5 https://theagentictimes.org/incidents/plugin4shell-flaw-lets-attackers-swap-pinned-plugins-in-ai-coding-agents 2026-10-01T15:11:33.856039+00:00 0.5 https://theagentictimes.org/incidents/microsoft-patches-cvss-10-0-azure-ai-foundry-privilege-escalation-flaw 2026-10-01T15:11:33.75087+00:00 0.5 https://theagentictimes.org/incidents/toolhive-containerized-mcp-servers-bypass-isolation-via-host-docker-internal 2026-10-01T15:11:34.402823+00:00 0.5 https://theagentictimes.org/incidents/process-compose-dns-rebinding-vulnerability-in-mcp-sse 2026-10-01T15:11:34.431806+00:00 0.5 https://theagentictimes.org/incidents/researchers-used-claude-to-hack-openai-employees-chatgpt-accounts 2026-10-01T15:11:34.177196+00:00 0.5 https://theagentictimes.org/incidents/claude-opus-5-helped-researchers-hijack-openai-staff-accounts-via-chained-flaws 2026-10-01T15:11:34.576483+00:00 0.5 https://theagentictimes.org/incidents/crowdsec-tanstack-npm-attack-led-to-theft-of-170-private-github-repos 2026-10-01T15:11:34.552385+00:00 0.5 https://theagentictimes.org/incidents/meta-muse-macos-app-flaw-lets-local-malware-redirect-dictation-traffic 2026-10-01T15:11:35.30899+00:00 0.5 https://theagentictimes.org/incidents/bragjack-poc-attack-hijacks-ai-browser-agents-via-malicious-extension 2026-10-01T15:11:34.990151+00:00 0.5 https://theagentictimes.org/incidents/ckan-mcp-server-ssrf-via-dns-name-resolution-bypass 2026-10-01T15:11:35.331132+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-roomi-fields-notebooklm-mcp-vault-batch-tool 2026-10-01T15:11:35.308989+00:00 0.5 https://theagentictimes.org/incidents/9router-authentication-bypass-via-spoofable-x-9r-real-ip-header 2026-10-01T15:11:35.810426+00:00 0.5 https://theagentictimes.org/incidents/z-ais-zcode-coding-tool-covertly-uploaded-user-code-to-alibaba-cloud 2026-10-01T15:11:35.509975+00:00 0.5 https://theagentictimes.org/incidents/malicious-npm-package-impersonates-twilio-security-tool-to-steal-credentials 2026-10-01T15:11:36.002867+00:00 0.5 https://theagentictimes.org/incidents/new-closedquorum-windows-malware-uses-ai-to-guide-attacks 2026-10-01T15:11:36.169901+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-95660-os-command-injection-in-moonshot-ai-kimi-code 2026-10-01T15:11:36.511886+00:00 0.5 https://theagentictimes.org/incidents/mcp-atlassian-incomplete-ssrf-remediation-cve-2026-77267 2026-10-01T15:11:36.823843+00:00 0.5 https://theagentictimes.org/incidents/critical-bifrost-ai-gateway-flaw-allows-unauthenticated-command-execution 2026-10-01T15:11:36.050654+00:00 0.5 https://theagentictimes.org/incidents/mcp-atlassian-multiple-critical-vulnerabilities-in-file-upload-and-ssrf 2026-10-01T15:11:36.508222+00:00 0.5 https://theagentictimes.org/incidents/mcp-atlassian-multiple-critical-vulnerabilities-in-file-handling-and-oauth 2026-10-01T15:11:36.5743+00:00 0.5 https://theagentictimes.org/incidents/lightrag-api-sensitive-information-exposure-and-xss-vulnerabilities 2026-10-01T15:11:37.014752+00:00 0.5 https://theagentictimes.org/incidents/openbao-agent-writes-secrets-to-stdout-in-error-conditions 2026-10-01T15:11:36.823843+00:00 0.5 https://theagentictimes.org/incidents/home-assistant-mdns-server-side-request-forgery 2026-10-01T15:11:37.209344+00:00 0.5 https://theagentictimes.org/incidents/new-windows-malware-closedquorum-uses-llms-to-pick-post-compromise-actions 2026-10-01T15:11:37.335557+00:00 0.5 https://theagentictimes.org/incidents/compromised-memtensor-npm-pypi-packages-deliver-sckit-stealer 2026-10-01T15:11:37.338507+00:00 0.5 https://theagentictimes.org/incidents/attackers-poison-ai-chatbot-answers-to-spread-phishing-and-disinformation 2026-10-01T15:11:37.522319+00:00 0.5 https://theagentictimes.org/incidents/windows-malware-closedquorum-lets-ai-models-vote-on-next-move 2026-10-01T15:11:37.592694+00:00 0.5 https://theagentictimes.org/incidents/malicious-ai-agents-steal-600k-credit-cards-from-100-sites 2026-10-01T15:11:37.892696+00:00 0.5 https://theagentictimes.org/incidents/prompt-injection-vulnerability-found-in-agentic-ai-app-manus 2026-10-01T15:11:38.075627+00:00 0.5 https://theagentictimes.org/incidents/ai-agents-breach-hugging-face-platform 2026-10-01T15:11:38.084291+00:00 0.5 https://theagentictimes.org/incidents/dbhub-dns-rebinding-and-read-only-bypass-vulnerabilities 2026-10-01T15:11:38.180332+00:00 0.5 https://theagentictimes.org/incidents/aws-language-servers-arbitrary-code-execution-and-file-write-vulnerabilities 2026-10-01T15:11:38.772504+00:00 0.5 https://theagentictimes.org/incidents/servicenow-ai-platform-sql-injection-vulnerability-cve-2026-13016 2026-10-01T15:11:38.783562+00:00 0.5 https://theagentictimes.org/incidents/decepticon-chatml-injection-enables-arbitrary-command-execution 2026-10-01T15:11:38.914865+00:00 0.5 https://theagentictimes.org/incidents/langchain-nvidia-ai-endpoints-local-file-disclosure-via-vlm-image-inputs 2026-10-01T15:11:38.926272+00:00 0.5 https://theagentictimes.org/incidents/cline-hub-dashboard-websocket-cross-origin-hijacking 2026-10-01T15:11:39.094551+00:00 0.5 https://theagentictimes.org/incidents/carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hosts 2026-10-01T15:11:39.678294+00:00 0.5 https://theagentictimes.org/incidents/github-actions-re-enabled-with-mini-shai-hulud-payload-still-active 2026-10-01T15:11:40.51358+00:00 0.5 https://theagentictimes.org/incidents/knowns-mcp-path-traversal-vulnerability-cve-2026-86439 2026-10-01T15:11:39.628889+00:00 0.5 https://theagentictimes.org/incidents/crook-used-open-source-ai-agents-to-breach-27-companies-steal-600k-cards 2026-10-01T15:11:39.652252+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-97228-rapid7-bulk-export-mcp-graphql-query-injection 2026-10-01T15:11:39.626435+00:00 0.5 https://theagentictimes.org/incidents/openai-discloses-ai-agents-interacted-with-us-government-websites 2026-10-01T15:11:40.489174+00:00 0.5 https://theagentictimes.org/incidents/bragjack-attack-targets-browser-ai-assistants 2026-10-01T15:11:39.712016+00:00 0.5 https://theagentictimes.org/incidents/cliinvoke-os-command-injection-vulnerability 2026-10-01T15:11:39.844599+00:00 0.5 https://theagentictimes.org/incidents/inmate-used-prompt-injection-to-get-ai-to-write-exploit-code 2026-10-01T15:11:40.345722+00:00 0.5 https://theagentictimes.org/incidents/carbonato-botnet-hijacks-exposed-docker-hosts-to-run-hermes-ai-agent-malware 2026-10-01T15:11:40.492117+00:00 0.5 https://theagentictimes.org/incidents/code-ollama-grep-search-command-injection-via-shell-substitution 2026-10-01T15:11:40.680479+00:00 0.5 https://theagentictimes.org/incidents/ai-threat-actor-jadepuffer-destroys-azure-tenant-resources 2026-10-01T15:11:41.035589+00:00 0.5 https://theagentictimes.org/incidents/storm-3168-uses-stolen-azure-identities-for-destructive-cloud-attack 2026-10-01T15:11:41.082423+00:00 0.5 https://theagentictimes.org/incidents/infostealer-logs-expose-ai-account-logins-for-80-000-organizations 2026-10-01T15:11:41.205604+00:00 0.5 https://theagentictimes.org/incidents/openai-shelves-gpt-6-1-astra-over-deception-unauthorized-actions 2026-10-01T15:11:41.20749+00:00 0.5 https://theagentictimes.org/incidents/carbonato-botnet-deploys-ai-agent-on-hacked-docker-hosts 2026-10-01T15:11:41.225787+00:00 0.5 https://theagentictimes.org/incidents/mcp-python-sdk-flaw-allowed-oauth-credential-theft-by-malicious-servers 2026-10-01T15:11:41.512406+00:00 0.5 https://theagentictimes.org/incidents/ai-coding-agents-leaked-sensitive-screenshots-to-public-github-repos 2026-10-01T15:11:42.036692+00:00 0.5 https://theagentictimes.org/incidents/openai-agents-breach-australian-government-websites-without-authorization 2026-10-01T15:11:42.244374+00:00 0.5 https://theagentictimes.org/incidents/unsloth-studio-flaw-enabled-code-execution-via-model-inspection 2026-10-01T15:11:42.614498+00:00 0.5 https://theagentictimes.org/incidents/openai-faces-hacking-lawsuit-over-ai-agent-attacks 2026-10-01T15:11:42.793235+00:00 0.5 https://theagentictimes.org/incidents/ai-coding-agents-leaked-13-000-internal-images-to-public-github-repos 2026-10-01T15:11:42.993453+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-9353-prompt-injection-flaw-in-nousresearch-hermes-agent-skills-guard 2026-10-01T15:10:56.294963+00:00 0.5 https://theagentictimes.org/incidents/gitpython-arbitrary-code-execution-via-repository-shadowing 2026-10-01T15:11:43.099658+00:00 0.5 https://theagentictimes.org/incidents/teen-researcher-found-microsoft-titan-auth-flaw-exposing-17-3-trillion-rows 2026-10-01T15:11:42.904204+00:00 0.5 https://theagentictimes.org/incidents/pageant-out-of-bounds-read-in-memorymap-via-malicious-pageant-agent 2026-10-01T15:11:43.368044+00:00 0.5 https://theagentictimes.org/incidents/ai-engine-wordpress-plugin-stored-xss-via-prompt-injection 2026-10-01T15:11:43.444704+00:00 0.5 https://theagentictimes.org/incidents/replit-agent-deletes-production-database 2026-10-01T15:10:21.861617+00:00 0.5 https://theagentictimes.org/incidents/moltbook-exposed-database 2026-10-01T15:10:22.290606+00:00 0.5 https://theagentictimes.org/incidents/echoleak-microsoft-365-copilot 2026-10-01T15:10:23.067001+00:00 0.5 https://theagentictimes.org/incidents/nx-s1ngularity-supply-chain 2026-10-01T15:10:23.081318+00:00 0.5 https://theagentictimes.org/incidents/mysql-mcp-server-sse-transport-allows-unauthenticated-sql-execution-cve-2026-599 2026-10-01T15:10:28.632802+00:00 0.5 https://theagentictimes.org/incidents/claude-code-flaw-let-malicious-repos-exfiltrate-anthropic-api-keys-cve-2026-2185 2026-10-01T15:10:30.956627+00:00 0.5 https://theagentictimes.org/incidents/unauthenticated-arbitrary-file-upload-in-kalrav-ai-agent-wordpress-plugin-cve-20 2026-10-01T15:10:31.781458+00:00 0.5 https://theagentictimes.org/incidents/multiple-claude-code-permission-and-sandbox-bypass-vulnerabilities-patched 2026-10-01T15:10:32.1063+00:00 0.5 https://theagentictimes.org/incidents/microsoft-ai-agent-tooling-flaws-semantic-kernel-file-write-and-copilot-command- 2026-10-01T15:10:33.066378+00:00 0.5 https://theagentictimes.org/incidents/covert-channel-in-chatgpts-internal-artifactory-enabled-cross-account-gmail-data 2026-10-01T15:10:28.132365+00:00 0.5 https://theagentictimes.org/incidents/openclaw-path-traversal-in-isvalidmedia-enables-arbitrary-file-read-cve-2026-254 2026-10-01T15:10:32.305183+00:00 0.5 https://theagentictimes.org/incidents/command-injection-flaws-in-github-copilot-and-visual-studio-enable-remote-code-e 2026-10-01T15:10:33.877712+00:00 0.5 https://theagentictimes.org/incidents/reflected-xss-in-cloudflare-agents-sdk-ai-playground-oauth-callback-cve-2026-172 2026-10-01T15:10:34.224635+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-27203-environment-variable-injection-in-ebay-api-mcp-server 2026-10-01T15:10:36.310076+00:00 0.5 https://theagentictimes.org/incidents/agenta-llmops-platform-sandbox-escape-rce-and-ssti-in-server-side-evaluators 2026-10-01T15:10:37.924287+00:00 0.5 https://theagentictimes.org/incidents/openclaw-agent-platform-ssrf-and-rce-via-prompt-injection-cve-2026-28451-cve-202 2026-10-01T15:10:38.699243+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-32247-cypher-injection-in-graphiti-search-filters-exploitable-via-promp 2026-10-01T15:10:40.068572+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-33060-ssrf-in-ckan-mcp-server-via-unvalidated-base-url-parameter 2026-10-01T15:10:41.620812+00:00 0.5 https://theagentictimes.org/incidents/agentic-tooling-flaws-claude-code-trust-bypass-and-mcp-go-ruby-sdk-transport-bug 2026-10-01T15:10:41.935078+00:00 0.5 https://theagentictimes.org/incidents/librechat-mcp-agent-flaws-enable-ssrf-and-oauth-token-exfiltration 2026-10-01T15:10:43.095116+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-ssrf-flaws-in-http-and-mcp-tools-endpoints-cve-2026-34162-34163 2026-10-01T15:10:44.555526+00:00 0.5 https://theagentictimes.org/incidents/pinchtab-ssrf-in-download-endpoint-allows-internal-network-and-file-access-cve-2 2026-10-01T15:10:39.121526+00:00 0.5 https://theagentictimes.org/incidents/anythingllm-1-11-1-and-earlier-missing-authentication-and-sql-agent-injection-fl 2026-10-01T15:10:40.18257+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-32128-fastgpt-python-sandbox-file-write-guardrail-bypass-via-fcntl-stdo 2026-10-01T15:10:41.243996+00:00 0.5 https://theagentictimes.org/incidents/multiple-langflow-vulnerabilities-including-unauthenticated-rce-fixed-in-1-9-0 2026-10-01T15:10:41.561167+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-23882-arbitrary-command-execution-via-blinko-mcp-server-creation 2026-10-01T15:10:42.491129+00:00 0.5 https://theagentictimes.org/incidents/two-cves-in-awesome-llm-apps-agents-path-traversal-and-cross-session-token-leak 2026-10-01T15:10:42.981196+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-34724-zammad-server-side-template-injection-enables-rce-via-ai-agent 2026-10-01T15:10:46.214207+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-ai-agent-platform-unauthenticated-ssrf-and-cross-tenant-access-control-f 2026-10-01T15:10:47.583065+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-mcp-data-vis-mcp-web-scraper-server-cve-2026-7146 2026-10-01T15:10:50.686972+00:00 0.5 https://theagentictimes.org/incidents/langchain-ssrf-protection-bypasses-in-langchain-text-splitters-and-langchain-ope 2026-10-01T15:10:51.015054+00:00 0.5 https://theagentictimes.org/incidents/multiple-patched-vulnerabilities-in-n8n-and-n8n-mcp-mcp-servers 2026-10-01T15:10:51.906349+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-disclosed-in-fastgpt-ai-agent-platform-including-sandbo 2026-10-01T15:10:53.303692+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-disclosed-in-mcp-registry-and-rmcp-rust-sdk 2026-10-01T15:10:55.578519+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-30625-remote-code-execution-in-upsonic-mcp-task-creation 2026-10-01T15:10:48.757058+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-excel-mcp-server-allows-unauthenticated-remote-arbitrary-file- 2026-10-01T15:10:49.644178+00:00 0.5 https://theagentictimes.org/incidents/flowise-pre-3-1-0-rce-via-prompt-injection-in-csv-airtable-agents-and-mcp-adapte 2026-10-01T15:10:49.9179+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-7729-ssrf-in-pixelsock-directus-mcp-1-0-0-mcp-interface 2026-10-01T15:10:51.562536+00:00 0.5 https://theagentictimes.org/incidents/praisonai-mcp-server-path-traversal-enables-arbitrary-file-write-and-code-execut 2026-10-01T15:10:53.015773+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-65719-remote-code-execution-in-kubectl-mcp-server-v1-1-1 2026-10-01T15:10:54.401869+00:00 0.5 https://theagentictimes.org/incidents/github-copilot-cli-arbitrary-code-execution-via-nested-bare-git-repository-cve-2 2026-10-01T15:10:55.422491+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44830-nocturne-memory-mcp-server-auth-bypass-exposes-agent-memory 2026-10-01T15:10:56.762033+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-horizon921-mcpilot-0-1-0-mcp-api-call-endpoint-cve-2026-10280 2026-10-01T15:10:57.752377+00:00 0.5 https://theagentictimes.org/incidents/langroid-sqlchatagent-prompt-injection-enables-rce-on-database-host-cve-2026-258 2026-10-01T15:10:58.220679+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-47250-mcp-server-kubernetes-kubectl-generic-allows-token-exfiltration-v 2026-10-01T15:10:59.096029+00:00 0.5 https://theagentictimes.org/incidents/tooljet-patches-three-flaws-cross-tenant-credential-decryption-ssrf-and-plugin-r 2026-10-01T15:11:03.008489+00:00 0.5 https://theagentictimes.org/incidents/n8n-and-n8n-mcp-flaws-expose-credentials-and-cross-tenant-workflow-backups 2026-10-01T15:11:06.601366+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-59723-cline-hub-dashboard-websocket-flaw-allows-remote-command-executio 2026-10-01T15:11:07.326143+00:00 0.5 https://theagentictimes.org/incidents/jan-local-api-server-cors-misconfiguration-cve-2026-66005 2026-10-01T15:11:09.54424+00:00 0.5 https://theagentictimes.org/incidents/injection-flaws-in-microsoft-copilot-products-allow-info-disclosure-and-code-exe 2026-10-01T15:10:58.401336+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-50287-agenticmail-mcp-server-http-endpoint-lacks-authentication 2026-10-01T15:10:59.062077+00:00 0.5 https://theagentictimes.org/incidents/cursor-desktop-ran-workspace-defined-claude-hooks-without-user-approval-cve-2026 2026-10-01T15:10:59.251949+00:00 0.5 https://theagentictimes.org/incidents/pydantic-ai-cloud-metadata-blocklist-bypass-via-ipv6-transition-addresses-cve-20 2026-10-01T15:10:59.827393+00:00 0.5 https://theagentictimes.org/incidents/eclipse-theia-ai-chat-prompt-injection-and-data-exfiltration-flaws-before-1-71-0 2026-10-01T15:11:00.423485+00:00 0.5 https://theagentictimes.org/incidents/line-desktop-mcp-http-mode-exposes-unauthenticated-mcp-endpoint-cve-2026-49357 2026-10-01T15:11:00.823435+00:00 0.5 https://theagentictimes.org/incidents/daytona-ai-code-execution-runtime-discloses-six-flaws-including-cross-tenant-acc 2026-10-01T15:11:02.083319+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-55249-command-injection-in-rtk-ai-rtk-rewrite-openclaw-plugin 2026-10-01T15:11:02.205124+00:00 0.5 https://theagentictimes.org/incidents/multiple-command-injection-and-policy-bypass-flaws-in-warp-agentic-dev-environme 2026-10-01T15:11:02.997507+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-13524-improper-authorization-in-cherry-studio-mcp-oauth-callback-server 2026-10-01T15:11:03.787432+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-58446-presenton-mcp-endpoint-bypasses-session-authentication 2026-10-01T15:11:04.501199+00:00 0.5 https://theagentictimes.org/incidents/claude-code-action-arbitrary-code-execution-via-malicious-mcp-json 2026-10-01T15:11:06.599483+00:00 0.5 https://theagentictimes.org/incidents/agenticmail-multiple-vulnerabilities-allowing-agent-impersonation-and-prompt-inj 2026-10-01T15:11:08.046986+00:00 0.5 https://theagentictimes.org/incidents/papersgpt-for-zotero-rce-via-unsanitized-llm-response 2026-10-01T15:11:14.479061+00:00 0.5 https://theagentictimes.org/incidents/flowise-code-injection-vulnerabilities-in-agent-nodes 2026-10-01T15:11:14.80236+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-17534-kimi-code-ssrf-via-dns-resolution-bypass 2026-10-01T15:11:10.135154+00:00 0.5 https://theagentictimes.org/incidents/github-mcp-server-nil-pointer-dereference-denial-of-service 2026-10-01T15:11:10.579535+00:00 0.5 https://theagentictimes.org/incidents/mcp-ruby-sdk-multiple-vulnerabilities-prior-to-0-23-0 2026-10-01T15:11:10.840991+00:00 0.5 https://theagentictimes.org/incidents/ai-copilot-content-generator-wordpress-plugin-authorization-bypass 2026-10-01T15:11:13.230043+00:00 0.5 https://theagentictimes.org/incidents/spring-ai-mcp-streamable-http-server-memory-exhaustion-dos 2026-10-01T15:11:18.225718+00:00 0.5 https://theagentictimes.org/incidents/dradis-ce-ssrf-via-unrestricted-ai-provider-address 2026-10-01T15:11:19.539564+00:00 0.5 https://theagentictimes.org/incidents/authorization-bypass-in-runzero-platform-mcp-service 2026-10-01T15:11:22.835435+00:00 0.5 https://theagentictimes.org/incidents/omnigent-multiple-authenticated-rce-and-policy-bypass-vulnerabilities 2026-10-01T15:11:23.960235+00:00 0.5 https://theagentictimes.org/incidents/memos-authentication-bypass-via-unset-internal-service-secret 2026-10-01T15:11:16.419803+00:00 0.5 https://theagentictimes.org/incidents/continue-cli-incomplete-denylist-allows-destructive-commands 2026-10-01T15:11:18.666899+00:00 0.5 https://theagentictimes.org/incidents/mcp-use-inspector-proxy-ssrf-via-unvalidated-target-url 2026-10-01T15:11:20.245475+00:00 0.5 https://theagentictimes.org/incidents/ssrf-vulnerability-in-github-enterprise-server-management-api 2026-10-01T15:11:22.92078+00:00 0.5