https://theagentictimes.org hourly 1 https://theagentictimes.org/incidents daily 0.6 https://theagentictimes.org/database daily 0.6 https://theagentictimes.org/ann daily 0.6 https://theagentictimes.org/about daily 0.6 https://theagentictimes.org/editorial-policy daily 0.6 https://theagentictimes.org/corrections daily 0.6 https://theagentictimes.org/contact daily 0.6 https://theagentictimes.org/vulnerabilities daily 0.7 https://theagentictimes.org/regulation daily 0.7 https://theagentictimes.org/vendors daily 0.7 https://theagentictimes.org/explainers daily 0.7 https://theagentictimes.org/incidents/amazon-q-extension-wiper-instruction 2026-09-13T12:38:28.889929+00:00 0.8 https://theagentictimes.org/vulnerabilities/gemini-cli-readme-attack 2026-09-13T12:38:28.904031+00:00 0.8 https://theagentictimes.org/incidents/nx-s1ngularity-ai-agents-hunt-secrets 2026-09-13T12:58:59.086549+00:00 0.8 https://theagentictimes.org/vulnerabilities/forcedleak-agentforce-web-to-lead 2026-09-13T12:38:28.962396+00:00 0.8 https://theagentictimes.org/vulnerabilities/shadowleak-deep-research-gmail 2026-09-13T12:38:29.081902+00:00 0.8 https://theagentictimes.org/incidents/anthropic-espionage-campaign-claude-code 2026-09-13T12:38:29.12677+00:00 0.8 https://theagentictimes.org/vulnerabilities/mcp-inspector-browser-rce 2026-09-13T12:59:02.854162+00:00 0.8 https://theagentictimes.org/vulnerabilities/agentflayer-shared-document-api-keys 2026-09-13T12:38:29.202924+00:00 0.8 https://theagentictimes.org/incidents/gemini-calendar-invite-smart-home 2026-09-13T12:38:29.188061+00:00 0.8 https://theagentictimes.org/incidents/clawhub-malicious-skills-infostealers 2026-09-13T12:38:29.233018+00:00 0.8 https://theagentictimes.org/incidents/comet-browser-agent-reddit-hijack 2026-09-13T12:38:29.0967+00:00 0.8 https://theagentictimes.org/incidents/salesloft-drift-salesforce-data-theft 2026-09-13T12:38:29.173862+00:00 0.8 https://theagentictimes.org/incidents/moltbook-open-database-agent-tokens 2026-09-13T12:38:29.218662+00:00 0.8 https://theagentictimes.org/incidents/replit-agent-wiped-production-database 2026-09-13T12:38:28.875879+00:00 0.8 https://theagentictimes.org/vulnerabilities/cursor-curxecute-one-message-rce 2026-09-13T12:38:28.917883+00:00 0.8 https://theagentictimes.org/incidents/supabase-mcp-support-ticket-leak 2026-09-13T12:38:28.948059+00:00 0.8 https://theagentictimes.org/vulnerabilities/echoleak-copilot-zero-click 2026-09-13T12:38:28.856581+00:00 0.8 https://theagentictimes.org/incidents/github-mcp-public-issue-private-leak 2026-09-13T12:38:28.9335+00:00 0.8 https://theagentictimes.org/vulnerabilities/langflow-unauthenticated-rce 2026-09-13T12:38:29.144635+00:00 0.8 https://theagentictimes.org/vulnerabilities/hidden-channel-in-chatgpts-package-server-leaked-gmail-data 2026-09-13T12:45:39.59952+00:00 0.8 https://theagentictimes.org/incidents/claude-broke-into-a-strangers-machine-during-a-hacking-test 2026-09-13T12:45:58.166646+00:00 0.8 https://theagentictimes.org/incidents/anthropic-says-claude-was-abused-to-automate-attacks-and-weapons-work 2026-09-13T12:46:16.416222+00:00 0.8 https://theagentictimes.org/incidents/anthropic-says-hackers-used-claude-to-mine-1-8m-android-apps 2026-09-13T12:46:36.740928+00:00 0.8 https://theagentictimes.org/vendors/hugging-face-tells-ai-agents-to-go-hack-a-benchmark-instead 2026-09-13T12:47:01.557768+00:00 0.8 https://theagentictimes.org/explainers/ai-bug-hunting-ends-the-era-of-security-through-obscurity 2026-09-13T12:47:22.121606+00:00 0.8 https://theagentictimes.org/incidents/openai-agent-swarm-linked-to-rubygems-supply-chain-attack 2026-09-13T12:50:07.697883+00:00 0.8 https://theagentictimes.org/vulnerabilities/central-dogma-git-mirror-trusts-any-ssh-host-key 2026-09-13T12:58:53.862865+00:00 0.8 https://theagentictimes.org/vulnerabilities/mysql-mcp-server-left-sql-wide-open-in-sse-mode 2026-09-13T12:58:54.386212+00:00 0.8 https://theagentictimes.org/regulation/air-canada-chatbot-ruling 2026-09-13T12:59:50.486069+00:00 0.8 https://theagentictimes.org/vulnerabilities/frontmcp-ssrf-patch-bypassed-via-dns-tricks-and-redirects 2026-09-13T21:16:16.809691+00:00 0.8 https://theagentictimes.org/incidents/echoleak-microsoft-365-copilot 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/replit-agent-deletes-production-database 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/amazon-q-developer-extension-wiper-prompt 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/gemini-cli-prompt-injection-code-execution 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/cursor-curxecute-cve-2025-54135 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/github-mcp-private-repo-leak 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/supabase-mcp-service-role-leak 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/forcedleak-salesforce-agentforce 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/autogpt-platform-ssrf-in-senddiscordfileblock-cve-2025-62616 2026-09-13T14:08:34.639776+00:00 0.5 https://theagentictimes.org/incidents/nx-s1ngularity-supply-chain 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/shadowleak-chatgpt-deep-research 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/perplexity-comet-prompt-injection 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/air-canada-chatbot-tribunal 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/anthropic-gtg-1002-espionage 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/langflow-cve-2025-3248 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/mcp-inspector-cve-2025-49596 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/salesloft-drift-oauth-theft 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-22785-code-injection-in-orval-mcp-server-generation-from-openapi-specs 2026-09-13T14:05:33.289968+00:00 0.5 https://theagentictimes.org/incidents/gemini-calendar-invite-promptware 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/agentflayer-chatgpt-connectors 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/moltbook-exposed-database 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/clawhub-malicious-skills 2026-09-13T12:14:45.315289+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-9611-dns-rebinding-in-microsoft-playwright-mcp-server-via-missing-origi 2026-09-13T14:04:57.773291+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-67366-path-traversal-via-symlinks-in-sylphxltd-filesystem-mcp-v0-5-8 2026-09-13T14:05:02.25639+00:00 0.5 https://theagentictimes.org/incidents/tencent-weknora-agent-flaws-allow-prompt-based-db-access-and-command-injection 2026-09-13T14:05:13.673609+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-zen-mcp-server-allows-arbitrary-file-reads-cve-2025-66689 2026-09-13T14:05:23.453069+00:00 0.5 https://theagentictimes.org/incidents/central-dogma-git-mirror-disables-ssh-host-key-verification-cve-2026-11745 2026-09-13T12:48:02.244543+00:00 0.5 https://theagentictimes.org/incidents/covert-channel-in-chatgpts-internal-artifactory-enabled-cross-account-gmail-data 2026-09-13T12:58:15.756195+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-59973-ssrf-fix-bypass-in-frontmcp-and-mcp-from-openapi-openapi-ref-hand 2026-09-13T12:48:21.599941+00:00 0.5 https://theagentictimes.org/incidents/openai-agent-swarm-tied-to-may-2026-rubygems-supply-chain-attack 2026-09-13T12:50:07.813775+00:00 0.5 https://theagentictimes.org/incidents/anthropic-discloses-fourth-case-of-claude-accessing-third-party-systems-without- 2026-09-13T12:58:15.756195+00:00 0.5 https://theagentictimes.org/incidents/anthropic-reports-threat-actors-abusing-claude-for-cyberattacks-weapons-and-surv 2026-09-13T12:58:15.756195+00:00 0.5 https://theagentictimes.org/incidents/threat-actors-abused-anthropics-claude-to-extract-secrets-from-1-8m-android-apps 2026-09-13T12:58:15.756195+00:00 0.5 https://theagentictimes.org/incidents/mysql-mcp-server-sse-transport-allows-unauthenticated-sql-execution-cve-2026-599 2026-09-13T12:58:15.756195+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-21445-missing-authentication-on-langflow-api-endpoints-exposes-conversa 2026-09-13T14:04:48.611064+00:00 0.5 https://theagentictimes.org/incidents/cve-2024-58340-redos-in-langchain-mrkl-agent-output-parser 2026-09-13T14:05:43.128605+00:00 0.5 https://theagentictimes.org/incidents/opencode-ai-coding-agent-unauthenticated-local-rce-and-xss-in-web-ui 2026-09-13T14:05:50.987944+00:00 0.5 https://theagentictimes.org/incidents/sandbox-escape-in-enclave-javascript-sandbox-for-ai-agents-cve-2026-22686 2026-09-13T14:06:01.860926+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-22708-cursor-agent-allowlist-bypass-lets-shell-built-ins-run-unapproved 2026-09-13T14:06:09.477425+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-23523-dive-mcp-host-deeplink-allows-arbitrary-command-execution 2026-09-13T14:06:18.824531+00:00 0.5 https://theagentictimes.org/incidents/mcpjam-inspector-1-4-2-remote-code-execution-via-crafted-mcp-server-install-requ 2026-09-13T14:06:27.441645+00:00 0.5 https://theagentictimes.org/incidents/claude-code-flaw-let-malicious-repos-exfiltrate-anthropic-api-keys-cve-2026-2185 2026-09-13T14:06:45.050885+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-22792-5ire-mcp-client-html-injection-enables-mcp-server-creation-and-rc 2026-09-13T14:06:56.115328+00:00 0.5 https://theagentictimes.org/incidents/three-information-disclosure-flaws-in-microsoft-copilot-copilot-studio-and-m365- 2026-09-13T14:07:03.851304+00:00 0.5 https://theagentictimes.org/incidents/unauthenticated-command-injection-rce-in-framelink-figma-and-ollama-mcp-servers 2026-09-13T14:07:15.094987+00:00 0.5 https://theagentictimes.org/incidents/chattermate-ai-chatbot-xss-via-chat-input-exposes-tokens-cve-2026-24399 2026-09-13T14:07:28.786269+00:00 0.5 https://theagentictimes.org/incidents/unauthenticated-arbitrary-file-upload-in-kalrav-ai-agent-wordpress-plugin-cve-20 2026-09-13T14:07:39.808023+00:00 0.5 https://theagentictimes.org/incidents/prompt-injection-via-road-signs-shown-to-hijack-autonomous-cars-and-drones 2026-09-13T14:07:48.236164+00:00 0.5 https://theagentictimes.org/incidents/multiple-claude-code-permission-and-sandbox-bypass-vulnerabilities-patched 2026-09-13T14:08:10.65515+00:00 0.5 https://theagentictimes.org/incidents/openclaw-path-traversal-in-isvalidmedia-enables-arbitrary-file-read-cve-2026-254 2026-09-13T14:08:18.284748+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-25546-command-injection-in-godot-mcp-mcp-server-enables-rce 2026-09-13T14:08:26.203247+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-25650-mcp-salesforce-connector-leaks-salesforce-auth-token 2026-09-13T14:08:58.815708+00:00 0.5 https://theagentictimes.org/incidents/pydantic-ai-framework-patches-path-traversal-xss-and-ssrf-vulnerabilities 2026-09-13T14:09:05.350904+00:00 0.5 https://theagentictimes.org/incidents/microsoft-ai-agent-tooling-flaws-semantic-kernel-file-write-and-copilot-command- 2026-09-13T14:09:16.131669+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-25533-sandbox-escape-in-enclave-javascript-sandbox-for-ai-agent-code 2026-09-13T14:09:25.139954+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-1868-template-injection-in-gitlab-ai-gateway-duo-workflow-service 2026-09-13T14:09:38.47155+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-25905-mcp-run-python-sandbox-escape-enables-mcp-server-hijacking 2026-09-13T14:09:49.888651+00:00 0.5 https://theagentictimes.org/incidents/command-injection-flaws-in-github-copilot-and-visual-studio-enable-remote-code-e 2026-09-13T14:09:59.280758+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-ai-agent-platform-unauthenticated-plugin-api-access-and-ssrf-flaws 2026-09-13T14:10:10.599616+00:00 0.5 https://theagentictimes.org/incidents/langchain-ssrf-flaws-in-chatopenai-token-counter-and-recursiveurlloader 2026-09-13T14:10:21.132512+00:00 0.5 https://theagentictimes.org/incidents/command-injection-in-sf-mcp-server-salesforce-mcp-server-cve-2026-26029 2026-09-13T14:10:32.411723+00:00 0.5 https://theagentictimes.org/incidents/reflected-xss-in-cloudflare-agents-sdk-ai-playground-oauth-callback-cve-2026-172 2026-09-13T14:10:43.015955+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-26268-cursor-sandbox-escape-via-writable-git-configuration 2026-09-13T14:10:53.582038+00:00 0.5 https://theagentictimes.org/incidents/multiple-openclaw-ai-assistant-vulnerabilities-disclosed-including-prompt-inject 2026-09-13T14:11:02.896767+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-26057-cisco-skill-scanner-api-server-unauthenticated-dos-and-arbitrary- 2026-09-13T14:11:10.548904+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-27203-environment-variable-injection-in-ebay-api-mcp-server 2026-09-13T14:11:25.987381+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-12345-remote-buffer-overflow-in-llm-claw-agent-deployment-function 2026-09-13T14:12:52.000244+00:00 0.5 https://theagentictimes.org/incidents/parse-dashboard-ai-agent-endpoint-flaws-allow-unauthenticated-master-key-databas 2026-09-13T14:11:42.586675+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-27597-sandbox-escape-in-enclave-ai-agent-javascript-sandbox-enables-rce 2026-09-13T14:11:51.592885+00:00 0.5 https://theagentictimes.org/incidents/langchain-ssrf-redirect-bypass-and-langsmith-studio-token-leak-vulnerabilities 2026-09-13T14:12:06.833864+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-mcp-git-servers-git-add-tool-stages-files-outside-repository 2026-09-13T14:12:14.750527+00:00 0.5 https://theagentictimes.org/incidents/zed-editor-agent-file-tools-symlink-escape-cve-2026-27967 2026-09-13T14:12:21.66369+00:00 0.5 https://theagentictimes.org/incidents/agenta-llmops-platform-sandbox-escape-rce-and-ssti-in-server-side-evaluators 2026-09-13T14:12:31.172355+00:00 0.5 https://theagentictimes.org/incidents/langflow-csv-agent-node-rce-via-prompt-injection-cve-2026-27966 2026-09-13T14:12:36.068975+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-2256-command-injection-in-modelscope-ms-agent-via-prompt-derived-input 2026-09-13T14:12:43.163818+00:00 0.5 https://theagentictimes.org/incidents/trivy-vs-code-extension-1-8-12-on-openvsx-compromised-to-exfiltrate-secrets-via- 2026-09-13T14:12:59.272041+00:00 0.5 https://theagentictimes.org/incidents/openclaw-agent-platform-ssrf-and-rce-via-prompt-injection-cve-2026-28451-cve-202 2026-09-13T14:13:08.364758+00:00 0.5 https://theagentictimes.org/incidents/github-copilot-cli-shell-tool-bypass-allows-arbitrary-code-execution-cve-2026-29 2026-09-13T14:13:13.911351+00:00 0.5 https://theagentictimes.org/incidents/agentgateway-mcp-to-openapi-request-injection-flaw-cve-2026-29791 2026-09-13T14:13:22.105097+00:00 0.5 https://theagentictimes.org/incidents/mcp-memory-service-exposes-system-details-via-unauthenticated-health-endpoint-cv 2026-09-13T14:13:30.174261+00:00 0.5 https://theagentictimes.org/incidents/pinchtab-ssrf-in-download-endpoint-allows-internal-network-and-file-access-cve-2 2026-09-13T14:13:37.890073+00:00 0.5 https://theagentictimes.org/incidents/weknora-mcp-tool-name-collision-enables-prompt-injection-and-tool-hijacking 2026-09-13T14:13:45.35679+00:00 0.5 https://theagentictimes.org/incidents/microsoft-discloses-ai-command-injection-in-m365-copilot-and-ssrf-in-azure-mcp-s 2026-09-13T14:13:59.507997+00:00 0.5 https://theagentictimes.org/incidents/rogue-ai-agent-implicated-in-security-incident-at-meta 2026-09-13T14:15:28.143785+00:00 0.5 https://theagentictimes.org/incidents/mcp-atlassian-server-flaws-allow-ssrf-and-arbitrary-file-write-before-v0-17-0 2026-09-13T14:14:08.645339+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-31854-cursor-indirect-prompt-injection-enables-automatic-command-execut 2026-09-13T14:14:22.1941+00:00 0.5 https://theagentictimes.org/incidents/ha-mcp-home-assistant-mcp-server-ssrf-and-xss-flaws-in-beta-oauth-consent-form 2026-09-13T14:14:32.898308+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-32128-fastgpt-python-sandbox-file-write-guardrail-bypass-via-fcntl-stdo 2026-09-13T14:14:38.562393+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-32247-cypher-injection-in-graphiti-search-filters-exploitable-via-promp 2026-09-13T14:14:48.727275+00:00 0.5 https://theagentictimes.org/incidents/anythingllm-1-11-1-and-earlier-missing-authentication-and-sql-agent-injection-fl 2026-09-13T14:15:02.187663+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-4270-aws-api-mcp-server-file-access-restriction-bypass 2026-09-13T14:15:12.188546+00:00 0.5 https://theagentictimes.org/incidents/fastmcp-oauth-token-audience-flaw-cve-2025-69196-fixed-in-2-14-2 2026-09-13T14:15:21.677971+00:00 0.5 https://theagentictimes.org/incidents/command-injection-flaws-in-microsoft-copilot-and-m365-copilot-allow-information- 2026-09-13T14:15:38.241887+00:00 0.5 https://theagentictimes.org/incidents/discourse-xss-via-prompt-injection-in-ai-triage-review-queue-cve-2026-27740 2026-09-13T14:15:44.810561+00:00 0.5 https://theagentictimes.org/incidents/sqlbot-stored-prompt-injection-chain-enables-rce-cve-2026-32622 2026-09-13T14:15:53.526684+00:00 0.5 https://theagentictimes.org/incidents/multiple-langflow-vulnerabilities-including-unauthenticated-rce-fixed-in-1-9-0 2026-09-13T14:16:08.364332+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-33060-ssrf-in-ckan-mcp-server-via-unvalidated-base-url-parameter 2026-09-13T14:16:17.468412+00:00 0.5 https://theagentictimes.org/incidents/agentic-tooling-flaws-claude-code-trust-bypass-and-mcp-go-ruby-sdk-transport-bug 2026-09-13T14:16:36.216387+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-ci-workflow-flaw-allows-code-execution-and-secret-theft-cve-2026-33075 2026-09-13T14:16:49.91971+00:00 0.5 https://theagentictimes.org/incidents/multiple-cves-in-pinchtab-ai-agent-browser-control-server 2026-09-13T14:17:06.427325+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-33010-wildcard-cors-in-mcp-memory-service-exposes-agent-memories 2026-09-13T14:17:13.983234+00:00 0.5 https://theagentictimes.org/incidents/multiple-critical-vulnerabilities-in-praisonai-multi-agent-framework-8-cves 2026-09-13T14:20:55.917045+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-5584-remote-code-injection-in-agenticseek-pyinterpreter-execute 2026-09-13T14:21:00.780073+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-5607-ssrf-in-imprvhub-mcp-browser-agent-up-to-0-8-0 2026-09-13T14:21:09.521038+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-35394-mobile-mcp-url-tool-allows-arbitrary-android-intent-execution 2026-09-13T14:21:17.869568+00:00 0.5 https://theagentictimes.org/incidents/dns-rebinding-flaw-in-mcp-java-sdk-allows-remote-tool-calls-cve-2026-35568 2026-09-13T14:21:26.941031+00:00 0.5 https://theagentictimes.org/incidents/os-command-injection-in-github-copilot-and-visual-studio-code 2026-09-13T17:25:18.797547+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-4530-sql-injection-in-aix-db-text2sql-agent-terminology-retriever 2026-09-13T14:17:24.346948+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-23882-arbitrary-command-execution-via-blinko-mcp-server-creation 2026-09-13T14:17:31.878247+00:00 0.5 https://theagentictimes.org/incidents/command-injection-in-openhands-git-diff-api-allows-arbitrary-commands-in-agent-s 2026-09-13T14:17:39.336325+00:00 0.5 https://theagentictimes.org/incidents/two-cves-in-awesome-llm-apps-agents-path-traversal-and-cross-session-token-leak 2026-09-13T14:17:50.777041+00:00 0.5 https://theagentictimes.org/incidents/prompt-injection-bypasses-safe-command-auto-approval-in-multiple-ai-coding-exten 2026-09-13T14:17:57.805882+00:00 0.5 https://theagentictimes.org/incidents/librechat-mcp-agent-flaws-enable-ssrf-and-oauth-token-exfiltration 2026-09-13T14:18:08.086125+00:00 0.5 https://theagentictimes.org/incidents/zero-click-prompt-injection-in-nanobot-ai-assistant-email-channel-cve-2026-33654 2026-09-13T14:18:15.57628+00:00 0.5 https://theagentictimes.org/incidents/kql-injection-in-azure-data-explorer-mcp-server-cve-2026-33980 2026-09-13T14:18:30.569758+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-mobilenext-mobile-mcp-mcp-server-cve-2026-33989 2026-09-13T14:18:37.335964+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-5002-prompt-injection-in-localgpt-llm-prompt-handler 2026-09-13T14:18:47.338518+00:00 0.5 https://theagentictimes.org/incidents/unauthenticated-mcp-endpoint-in-nginx-ui-allows-full-nginx-takeover-cve-2026-330 2026-09-13T14:18:58.984758+00:00 0.5 https://theagentictimes.org/incidents/langchain-path-traversal-in-prompt-loading-allows-arbitrary-file-read-cve-2026-3 2026-09-13T14:19:09.808326+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-4399-prompt-injection-in-1millionbot-millie-chatbot 2026-09-13T14:19:18.25699+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-29870-path-traversal-enables-arbitrary-file-write-in-agentic-context-en 2026-09-13T14:19:27.652895+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-ssrf-flaws-in-http-and-mcp-tools-endpoints-cve-2026-34162-34163 2026-09-13T14:19:33.889981+00:00 0.5 https://theagentictimes.org/incidents/giskard-library-flaw-chatworkflow-chat-renders-input-as-jinja2-template-enabling 2026-09-13T14:19:43.415939+00:00 0.5 https://theagentictimes.org/incidents/nhost-cli-mcp-server-lacked-authentication-and-cors-enforcement-cve-2026-34200 2026-09-13T14:19:52.128625+00:00 0.5 https://theagentictimes.org/incidents/origin-validation-flaws-in-official-mcp-java-and-go-sdks-allow-cross-site-access 2026-09-13T14:20:01.896773+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-34451-path-validation-flaw-in-anthropic-typescript-sdk-memory-tool 2026-09-13T14:20:10.619804+00:00 0.5 https://theagentictimes.org/incidents/fastmcp-flaws-before-3-2-0-authenticated-ssrf-and-oauth-confused-deputy 2026-09-13T14:20:34.744803+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-64340-command-injection-in-fastmcp-install-commands-on-windows 2026-09-13T14:20:44.041154+00:00 0.5 https://theagentictimes.org/incidents/ssrf-vulnerability-in-a11y-mcp-mcp-server-cve-2026-5323 2026-09-13T14:20:24.487853+00:00 0.5 https://theagentictimes.org/incidents/apollo-mcp-server-dns-rebinding-flaw-allows-local-tool-invocation-cve-2026-35577 2026-09-13T14:22:11.042591+00:00 0.5 https://theagentictimes.org/incidents/langchain-prompt-template-validation-flaw-and-langchain-chatchat-mcp-rce-disclos 2026-09-13T14:22:26.86751+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-34724-zammad-server-side-template-injection-enables-rce-via-ai-agent 2026-09-13T14:21:34.895775+00:00 0.5 https://theagentictimes.org/incidents/frontmcp-ssrf-and-local-file-read-via-unrestricted-openapi-ref-dereferencing-cve 2026-09-13T14:21:43.649315+00:00 0.5 https://theagentictimes.org/incidents/command-injection-in-awwaiid-mcp-server-taskwarrior-up-to-1-0-1-cve-2026-5833 2026-09-13T14:21:51.670274+00:00 0.5 https://theagentictimes.org/incidents/agixt-path-traversal-in-essential-abilities-allows-arbitrary-file-access-cve-202 2026-09-13T14:22:02.491569+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-35651-ansi-escape-injection-in-openclaw-approval-prompts 2026-09-13T14:22:37.839533+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-ai-agent-platform-unauthenticated-ssrf-and-cross-tenant-access-control-f 2026-09-13T14:22:46.029375+00:00 0.5 https://theagentictimes.org/incidents/aws-mcp-server-command-injection-flaws-allow-unauthenticated-remote-code-executi 2026-09-13T14:22:54.788656+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-34476-ssrf-via-sw-url-header-in-apache-skywalking-mcp 2026-09-13T14:23:04.425218+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-23653-command-injection-in-github-copilot-and-visual-studio-code 2026-09-13T14:23:21.921537+00:00 0.5 https://theagentictimes.org/incidents/argument-injection-in-mcp-server-kubernetes-port-forward-tool-cve-2026-39884 2026-09-13T14:23:31.97747+00:00 0.5 https://theagentictimes.org/incidents/splunk-mcp-server-app-logs-session-and-authorization-tokens-in-clear-text-cve-20 2026-09-13T14:23:39.360393+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-30615-prompt-injection-in-windsurf-enables-rce-via-malicious-mcp-server 2026-09-13T14:23:45.403371+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-30616-remote-code-execution-in-jaaz-1-0-30-mcp-stdio-command-handling 2026-09-13T14:23:54.47802+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-30624-remote-code-execution-in-agent-zero-mcp-server-configuration 2026-09-13T14:24:04.622951+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-30625-remote-code-execution-in-upsonic-mcp-task-creation 2026-09-13T14:24:16.144405+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-39313-unbounded-request-body-in-mcp-framework-enables-remote-dos 2026-09-13T14:24:26.416069+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-6494-log-injection-in-ansible-automation-platform-mcp-server 2026-09-13T14:24:36.331701+00:00 0.5 https://theagentictimes.org/incidents/mcp-neo4j-cypher-read-only-bypass-via-apoc-procedures-cve-2026-35402 2026-09-13T14:26:05.682955+00:00 0.5 https://theagentictimes.org/incidents/claude-code-flaws-windows-config-hijack-and-symlink-sandbox-escape 2026-09-13T14:26:22.247476+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-nosql-injection-flaws-allow-authentication-bypass-and-account-takeover 2026-09-13T14:26:33.568579+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-66335-sql-injection-flaw-in-apache-doris-mcp-server-before-0-6-1 2026-09-13T14:26:41.36253+00:00 0.5 https://theagentictimes.org/incidents/two-remotely-exploitable-flaws-disclosed-in-ericc-ch-copilot-api-up-to-0-7-0 2026-09-13T14:26:48.386689+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-excel-mcp-server-allows-unauthenticated-remote-arbitrary-file- 2026-09-13T14:26:54.152474+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-40608-unbounded-request-body-crashes-next-ai-draw-io-mcp-sidecar 2026-09-13T14:27:05.222394+00:00 0.5 https://theagentictimes.org/incidents/flowise-pre-3-1-0-rce-via-prompt-injection-in-csv-airtable-agents-and-mcp-adapte 2026-09-13T14:27:15.773778+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-joecastrom-mcp-chat-studio-llm-models-api-cve-2026-7147 2026-09-13T14:28:25.861988+00:00 0.5 https://theagentictimes.org/incidents/paperclip-ai-agent-orchestrator-unauthenticated-and-agent-key-rce-flaws-cve-2026 2026-09-13T14:27:34.490762+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-33102-open-redirect-in-microsoft-365-copilot-enables-privilege-elevatio 2026-09-13T14:27:42.797265+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-41349-openclaw-agentic-consent-bypass-via-config-patch 2026-09-13T14:27:47.086313+00:00 0.5 https://theagentictimes.org/incidents/anythingllm-stored-xss-via-unsanitised-chart-captions-cve-2026-41318 2026-09-13T14:27:55.942154+00:00 0.5 https://theagentictimes.org/incidents/langchain-ssrf-protection-bypasses-in-langchain-text-splitters-and-langchain-ope 2026-09-13T14:28:07.456902+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-mcp-data-vis-mcp-web-scraper-server-cve-2026-7146 2026-09-13T14:28:16.227532+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-30635-command-injection-in-automagik-genie-2-5-27-mcp-server 2026-09-13T14:31:47.316975+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-42869-hardcoded-jwt-secret-in-socfortress-copilot-allows-admin-token-fo 2026-09-13T14:31:56.297183+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-42260-ssrf-in-open-websearch-mcp-server-url-safety-checks 2026-09-13T14:32:45.223463+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-dh1011-auto-favicon-mcp-server-tool-cve-2026-7150 2026-09-13T14:28:35.111664+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-dmitryglhf-mcp-url-downloader-mcp-server-cve-2026-7158 2026-09-13T14:28:47.052595+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-tencent-cloudbase-mcp-open-url-endpoint-cve-2026-7221 2026-09-13T14:28:56.711065+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-7417-ssrf-in-algovate-xhs-mcp-mcp-server-publish-tool 2026-09-13T14:29:06.664322+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-43901-wireshark-mcp-server-allows-arbitrary-export-path-via-unsandboxed 2026-09-13T14:32:26.792443+00:00 0.5 https://theagentictimes.org/incidents/junoclaw-agentic-ai-platform-patches-three-mcp-tool-vulnerabilities 2026-09-13T14:33:05.164715+00:00 0.5 https://theagentictimes.org/incidents/junoclaw-agent-platform-shell-command-injection-and-ssrf-flaws-cve-2026-43990-43 2026-09-13T14:33:13.012168+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-42045-lobechat-artifact-xss-chains-to-arbitrary-command-execution 2026-09-13T14:33:25.494614+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-75062-eval-injection-in-google-langfun 2026-09-13T17:29:44.166593+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-7729-ssrf-in-pixelsock-directus-mcp-1-0-0-mcp-interface 2026-09-13T14:29:15.938884+00:00 0.5 https://theagentictimes.org/incidents/evolver-ai-agent-engine-path-traversal-command-injection-and-prototype-pollution 2026-09-13T14:29:26.483462+00:00 0.5 https://theagentictimes.org/incidents/pptagent-code-execution-and-arbitrary-file-write-flaws-patched-cve-2026-42078-79 2026-09-13T14:29:35.354253+00:00 0.5 https://theagentictimes.org/incidents/multiple-patched-vulnerabilities-in-n8n-and-n8n-mcp-mcp-servers 2026-09-13T14:29:46.722936+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-35228-oracle-mcp-server-helper-tool-flaw-allows-malicious-sql-execution 2026-09-13T14:29:55.577873+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-3456-sql-injection-in-wordpress-geekybot-ai-chatbot-plugin 2026-09-13T14:30:07.340384+00:00 0.5 https://theagentictimes.org/incidents/four-unpatched-cves-in-langchain-chatchat-file-apis-exploits-public 2026-09-13T14:30:22.276344+00:00 0.5 https://theagentictimes.org/incidents/sqlbot-text2sql-prompt-injection-enables-arbitrary-sql-execution-and-rce-cve-202 2026-09-13T14:30:28.917276+00:00 0.5 https://theagentictimes.org/incidents/multiple-openclaw-mcp-and-gateway-vulnerabilities-patched-cve-2026-44118-44995-4 2026-09-13T14:30:41.205914+00:00 0.5 https://theagentictimes.org/incidents/microsoft-discloses-multiple-copilot-injection-and-access-control-cves-may-2026 2026-09-13T14:30:52.484713+00:00 0.5 https://theagentictimes.org/incidents/prompthub-ssrf-via-ipv6-bypass-in-skills-fetch-remote-endpoint-cve-2026-42261 2026-09-13T14:30:58.582467+00:00 0.5 https://theagentictimes.org/incidents/litellm-mcp-preview-endpoints-allow-authenticated-users-to-run-commands-on-proxy 2026-09-13T14:31:09.364718+00:00 0.5 https://theagentictimes.org/incidents/praisonai-mcp-server-path-traversal-enables-arbitrary-file-write-and-code-execut 2026-09-13T14:31:18.220895+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-disclosed-in-fastgpt-ai-agent-platform-including-sandbo 2026-09-13T14:31:29.434042+00:00 0.5 https://theagentictimes.org/incidents/unauthenticated-rce-in-code-runner-mcp-server-http-transport-cve-2026-5029 2026-09-13T14:32:40.095733+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-31246-command-injection-in-gpt-pilot-executor-run-enables-rce 2026-09-13T14:31:37.717214+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-8319-remote-resource-exhaustion-in-aiwaves-cn-agents-memory-recall-func 2026-09-13T14:32:05.593214+00:00 0.5 https://theagentictimes.org/incidents/deepchat-cve-2026-43899-external-url-handler-bypass-enables-code-execution 2026-09-13T14:32:16.800027+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-disclosed-in-mcp-registry-and-rmcp-rust-sdk 2026-09-13T14:34:18.479335+00:00 0.5 https://theagentictimes.org/incidents/hatchet-cross-tenant-data-exposure-via-missing-authorization-cve-2026-42572 2026-09-13T14:34:26.570013+00:00 0.5 https://theagentictimes.org/incidents/microsoft-apm-agent-dependency-manager-path-traversal-and-symlink-flaws-3-cves 2026-09-13T14:34:35.317247+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-65719-remote-code-execution-in-kubectl-mcp-server-v1-1-1 2026-09-13T14:32:53.911164+00:00 0.5 https://theagentictimes.org/incidents/langflow-path-traversal-in-knowledge-bases-api-allows-arbitrary-directory-deleti 2026-09-13T14:33:34.057055+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44220-ciguard-symlink-traversal-exposes-files-outside-scan-root 2026-09-13T14:33:45.60478+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44246-prompt-injection-in-nnu-net-github-issue-triage-agent-workflow 2026-09-13T14:33:53.406043+00:00 0.5 https://theagentictimes.org/incidents/vercel-cli-leaked-auth-tokens-in-ai-agent-non-interactive-command-output-cve-202 2026-09-13T14:34:01.39529+00:00 0.5 https://theagentictimes.org/incidents/github-copilot-cli-arbitrary-code-execution-via-nested-bare-git-repository-cve-2 2026-09-13T14:34:06.593539+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44717-rce-in-mcp-calculate-server-via-unsanitized-eval 2026-09-13T14:34:44.389104+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-45401-ssrf-via-unvalidated-redirects-in-open-webui-web-retrieval 2026-09-13T14:34:55.516551+00:00 0.5 https://theagentictimes.org/incidents/command-injection-flaws-in-microsoft-copilot-and-m365-copilot-cve-2026-41090-cve 2026-09-13T14:35:11.196267+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-9353-prompt-injection-flaw-in-nousresearch-hermes-agent-skills-guard 2026-09-13T14:35:19.993417+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44209-ssti-to-rce-in-banks-llm-prompt-template-library 2026-09-13T14:35:29.265179+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44450-lumiverse-mcp-server-endpoint-allows-authenticated-remote-code-ex 2026-09-13T14:35:41.199112+00:00 0.5 https://theagentictimes.org/incidents/mcp-server-kubernetes-access-controls-bypassable-at-tool-execution-layer-cve-202 2026-09-13T14:38:32.213253+00:00 0.5 https://theagentictimes.org/incidents/langchain-and-langsmith-sdk-unsafe-deserialization-of-untrusted-serialized-objec 2026-09-13T14:35:53.915703+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44895-gitlab-mcp-server-http-transport-exposes-unauthenticated-rpc-endp 2026-09-13T14:36:00.857126+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44830-nocturne-memory-mcp-server-auth-bypass-exposes-agent-memory 2026-09-13T14:36:09.890787+00:00 0.5 https://theagentictimes.org/incidents/gryph-ai-coding-agent-security-layer-logs-sensitive-file-content-cve-2026-45046 2026-09-13T14:36:17.316351+00:00 0.5 https://theagentictimes.org/incidents/anythingllm-agent-filesystem-skills-allow-command-execution-and-path-escape 2026-09-13T14:36:27.820969+00:00 0.5 https://theagentictimes.org/incidents/jqwik-library-contained-hidden-prompt-injection-telling-ai-coding-agents-to-dele 2026-09-13T14:36:36.335124+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-45312-ragflow-jinja2-template-injection-enables-remote-code-execution 2026-09-13T14:36:46.810104+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-45555-rce-in-roslyn-codelens-mcp-server-via-unchecked-analyzer-dll-load 2026-09-13T14:36:57.49969+00:00 0.5 https://theagentictimes.org/incidents/n8n-mcp-flaws-leak-telemetry-data-and-misroute-multi-tenant-n8n-api-calls 2026-09-13T14:37:07.755682+00:00 0.5 https://theagentictimes.org/incidents/fastgpt-ssrf-and-code-sandbox-escape-flaws-fixed-in-4-15-0-beta1 2026-09-13T14:37:17.959332+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-horizon921-mcpilot-0-1-0-mcp-api-call-endpoint-cve-2026-10280 2026-09-13T14:37:26.746417+00:00 0.5 https://theagentictimes.org/incidents/langroid-sqlchatagent-prompt-injection-enables-rce-on-database-host-cve-2026-258 2026-09-13T14:37:35.067527+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-42073-openclaude-mcp-oauth-state-check-bypass-allows-callback-server-sh 2026-09-13T14:37:46.448675+00:00 0.5 https://theagentictimes.org/incidents/librechat-mcp-integration-flaws-leak-server-secrets-and-allow-cross-agent-file-d 2026-09-13T14:37:55.566399+00:00 0.5 https://theagentictimes.org/incidents/injection-flaws-in-microsoft-copilot-products-allow-info-disclosure-and-code-exe 2026-09-13T14:38:07.745438+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-45482-path-traversal-in-github-copilot-and-visual-studio-code 2026-09-13T14:38:18.066094+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-47250-mcp-server-kubernetes-kubectl-generic-allows-token-exfiltration-v 2026-09-13T14:38:38.583089+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-50287-agenticmail-mcp-server-http-endpoint-lacks-authentication 2026-09-13T14:38:47.250017+00:00 0.5 https://theagentictimes.org/incidents/two-claude-code-vulnerabilities-world-readable-copy-output-and-worktree-sandbox- 2026-09-13T14:44:50.858417+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-13437-app-tokens-leaked-via-ai-agent-job-api-in-devolutions-powershell- 2026-09-13T14:44:58.134358+00:00 0.5 https://theagentictimes.org/incidents/fast-mcp-telegram-mcp-server-auth-bypass-via-path-traversal-in-bearer-token-cve- 2026-09-13T14:45:50.755965+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-41106-open-redirect-in-m365-copilot-enables-privilege-elevation 2026-09-13T14:45:55.558532+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-13341-indirect-prompt-injection-in-kong-konnect-mcp-server 2026-09-13T14:46:04.3809+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-14742-weak-hash-in-langgraph-task-result-cache-key 2026-09-13T14:46:13.44869+00:00 0.5 https://theagentictimes.org/incidents/mcp-for-stata-command-injection-via-log-file-name-parameter 2026-09-13T17:21:23.074188+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-12203-unauthenticated-data-exposure-in-hkuds-ai-trader-research-export 2026-09-13T14:38:56.317308+00:00 0.5 https://theagentictimes.org/incidents/cursor-desktop-ran-workspace-defined-claude-hooks-without-user-approval-cve-2026 2026-09-13T14:39:04.243679+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-53840-openclaw-leaks-custom-headers-via-mcp-cross-origin-redirects 2026-09-13T14:39:10.835021+00:00 0.5 https://theagentictimes.org/incidents/pydantic-ai-cloud-metadata-blocklist-bypass-via-ipv6-transition-addresses-cve-20 2026-09-13T14:39:22.797433+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-20265-splunk-ai-toolkit-allowlist-flaw-enables-agent-data-exfiltration 2026-09-13T14:39:32.32039+00:00 0.5 https://theagentictimes.org/incidents/network-ai-mcp-sse-server-unauthenticated-by-default-cve-2026-48814 2026-09-13T14:39:41.106908+00:00 0.5 https://theagentictimes.org/incidents/windows-mcp-unauthenticated-http-control-plane-allowed-arbitrary-powershell-exec 2026-09-13T14:39:48.283759+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-11719-scope-enforcement-bypass-in-mcp-toolbox-for-databases 2026-09-13T14:39:59.519965+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-49257-mcp-pinot-mcp-server-exposes-unauthenticated-pinot-access 2026-09-13T14:40:15.447279+00:00 0.5 https://theagentictimes.org/incidents/eclipse-theia-ai-chat-prompt-injection-and-data-exfiltration-flaws-before-1-71-0 2026-09-13T14:40:07.303173+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-10564-ssrf-in-ibm-langflow-oss-rss-and-searxng-components 2026-09-13T14:45:17.093312+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-9132-github-enterprise-server-copilot-diff-endpoint-exposed-private-rep 2026-09-13T14:45:24.126954+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-58446-presenton-mcp-endpoint-bypasses-session-authentication 2026-09-13T14:45:31.449976+00:00 0.5 https://theagentictimes.org/incidents/multiple-microsoft-copilot-vulnerabilities-disclosed-including-workspace-escape- 2026-09-13T14:40:33.297246+00:00 0.5 https://theagentictimes.org/incidents/praisonai-flaw-lets-agents-run-arbitrary-shell-commands-via-forced-auto-approval 2026-09-13T14:40:41.686178+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-12045-pgadmin-4-ai-assistant-read-only-transaction-bypass-via-prompt-in 2026-09-13T14:40:48.795289+00:00 0.5 https://theagentictimes.org/incidents/line-desktop-mcp-http-mode-exposes-unauthenticated-mcp-endpoint-cve-2026-49357 2026-09-13T14:40:56.398115+00:00 0.5 https://theagentictimes.org/incidents/gin-vue-admin-2-9-1-code-generation-mcp-flaw-allows-remote-code-execution-cve-20 2026-09-13T14:41:05.205903+00:00 0.5 https://theagentictimes.org/incidents/multiple-remote-code-execution-flaws-in-flowise-ai-agent-builder-platform 2026-09-13T14:41:16.031565+00:00 0.5 https://theagentictimes.org/incidents/two-ssrf-vulnerabilities-in-berriai-litellm-mcp-server-components-1-82-2 2026-09-13T14:41:27.644261+00:00 0.5 https://theagentictimes.org/incidents/cve-2025-66336-sql-injection-and-authorization-bypass-in-apache-doris-mcp-server 2026-09-13T14:41:36.79326+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-55443-langchain-path-traversal-allows-file-disclosure-outside-intended- 2026-09-13T14:41:46.802412+00:00 0.5 https://theagentictimes.org/incidents/multiple-langflow-vulnerabilities-unauthenticated-rce-idor-and-path-traversal 2026-09-13T14:41:57.552692+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-54316-claude-code-webfetch-allowlist-enabled-covert-data-exfiltration 2026-09-13T14:42:05.764261+00:00 0.5 https://theagentictimes.org/incidents/daytona-ai-code-execution-runtime-discloses-six-flaws-including-cross-tenant-acc 2026-09-13T14:42:15.753235+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-55249-command-injection-in-rtk-ai-rtk-rewrite-openclaw-plugin 2026-09-13T14:42:27.904757+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-12112-session-hijacking-flaw-in-foreman-mcp-server-enables-privilege-es 2026-09-13T14:42:33.486924+00:00 0.5 https://theagentictimes.org/incidents/jenkins-mcp-server-plugin-missing-permission-check-exposes-pipeline-replay-scrip 2026-09-13T14:42:42.925689+00:00 0.5 https://theagentictimes.org/incidents/multiple-command-injection-and-policy-bypass-flaws-in-warp-agentic-dev-environme 2026-09-13T14:42:53.620796+00:00 0.5 https://theagentictimes.org/incidents/twenty-crm-ai-agent-monitor-idor-exposed-cross-workspace-chat-history-cve-2026-5 2026-09-13T14:43:03.947644+00:00 0.5 https://theagentictimes.org/incidents/librechat-agent-file-upload-authorization-bypass-and-mcp-oauth-token-theft-flaws 2026-09-13T14:43:12.956261+00:00 0.5 https://theagentictimes.org/incidents/tooljet-patches-three-flaws-cross-tenant-credential-decryption-ssrf-and-plugin-r 2026-09-13T14:43:25.711193+00:00 0.5 https://theagentictimes.org/incidents/cursor-sandbox-escape-flaws-cve-2026-50548-50549-allow-writes-outside-workspace 2026-09-13T14:43:32.352375+00:00 0.5 https://theagentictimes.org/incidents/mattermost-agents-mcp-server-ssrf-allows-internal-data-exfiltration-cve-2026-433 2026-09-13T14:43:41.759894+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-58168-deeptutor-authorization-bypass-grants-unrestricted-mcp-tool-acces 2026-09-13T14:45:05.327113+00:00 0.5 https://theagentictimes.org/incidents/autogpt-denial-of-service-flaw-in-aitextsummarizerblock-cve-2025-32394 2026-09-13T14:43:50.706888+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-48529-github-mcp-server-shares-first-users-credentials-in-lockdown-mode 2026-09-13T14:44:00.638092+00:00 0.5 https://theagentictimes.org/incidents/flowise-custom-mcp-env-var-denylist-bypass-enables-rce-cve-2026-58057 2026-09-13T14:44:27.30271+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-14898-codex-macos-app-image-rendering-enables-prompt-injection-data-exf 2026-09-13T14:46:37.595857+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-13524-improper-authorization-in-cherry-studio-mcp-oauth-callback-server 2026-09-13T14:44:38.842466+00:00 0.5 https://theagentictimes.org/incidents/ssrf-in-aianytime-awesome-mcp-server-wiki-summary-tool-cve-2026-14748 2026-09-13T14:46:22.64738+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-44934-suse-rancher-ai-agent-leaks-api-keys-in-debug-logs 2026-09-13T14:46:31.302754+00:00 0.5 https://theagentictimes.org/incidents/researchers-trick-githubs-ai-coding-agent-into-leaking-private-repositories 2026-09-13T14:46:46.545955+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-59807-composio-sdk-path-validation-bypass-enables-credential-file-exfil 2026-09-13T14:46:53.518742+00:00 0.5 https://theagentictimes.org/incidents/litellm-mcp-endpoint-authentication-bypass-via-forged-authorization-header-cve-2 2026-09-13T14:47:03.564348+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-59723-cline-hub-dashboard-websocket-flaw-allows-remote-command-executio 2026-09-13T14:47:12.244957+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-15189-ssrf-in-aerostack-mcp-whatsapp-mcp-upload-media-tool 2026-09-13T14:47:21.168805+00:00 0.5 https://theagentictimes.org/incidents/n8n-and-n8n-mcp-flaws-expose-credentials-and-cross-tenant-workflow-backups 2026-09-13T14:47:33.423607+00:00 0.5 https://theagentictimes.org/incidents/claude-code-action-arbitrary-code-execution-via-malicious-mcp-json 2026-09-13T17:20:12.059447+00:00 0.5 https://theagentictimes.org/incidents/dbt-mcp-argument-injection-and-data-leak-vulnerabilities 2026-09-13T17:20:22.042652+00:00 0.5 https://theagentictimes.org/incidents/apify-mcp-server-url-validation-bypass 2026-09-13T17:20:27.991459+00:00 0.5 https://theagentictimes.org/incidents/ai-copilot-wordpress-plugin-oauth-token-binding-vulnerability 2026-09-13T17:20:34.096907+00:00 0.5 https://theagentictimes.org/incidents/forgecode-automatically-executes-arbitrary-commands-from-malicious-mcp-json 2026-09-13T17:20:36.346243+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-58195-agentic-flow-command-injection-via-mcp-server-tools 2026-09-13T17:20:42.504465+00:00 0.5 https://theagentictimes.org/incidents/ibm-langflow-oss-code-injection-via-toolguard-integration 2026-09-13T17:20:48.849516+00:00 0.5 https://theagentictimes.org/incidents/network-ai-mcp-sse-server-missing-authentication 2026-09-13T17:20:59.780662+00:00 0.5 https://theagentictimes.org/incidents/nono-sandbox-escape-via-unix-domain-socket-access 2026-09-13T17:21:02.75522+00:00 0.5 https://theagentictimes.org/incidents/agenticmail-multiple-vulnerabilities-allowing-agent-impersonation-and-prompt-inj 2026-09-13T17:21:10.080768+00:00 0.5 https://theagentictimes.org/incidents/nextcrm-mcp-api-missing-role-checks-in-product-operations 2026-09-13T17:21:16.69322+00:00 0.5 https://theagentictimes.org/incidents/mcp-webresearch-0-1-7-ssrf-vulnerability-via-llm-prompt-injection 2026-09-13T17:21:26.070088+00:00 0.5 https://theagentictimes.org/incidents/n8n-privilege-escalation-and-oauth-authorization-vulnerabilities 2026-09-13T17:21:38.228433+00:00 0.5 https://theagentictimes.org/incidents/apifold-webhook-endpoint-accepts-unauthenticated-arbitrary-json 2026-09-13T17:21:57.58629+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-ansible-lightspeed-mcp-server-via-prompt-injection 2026-09-13T17:21:31.769312+00:00 0.5 https://theagentictimes.org/incidents/void-path-traversal-in-ai-agent-file-reading-tools 2026-09-13T17:21:51.25127+00:00 0.5 https://theagentictimes.org/incidents/agentgpt-authorization-bypass-allows-unauthorized-task-attachment 2026-09-13T17:22:04.353459+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-50517-unsafe-deserialization-in-m365-copilot 2026-09-13T17:22:09.201248+00:00 0.5 https://theagentictimes.org/incidents/blendermcp-path-traversal-vulnerability-in-download-polyhaven-asset 2026-09-13T17:22:15.321996+00:00 0.5 https://theagentictimes.org/incidents/jan-local-api-server-cors-misconfiguration-cve-2026-66005 2026-09-13T17:22:22.077921+00:00 0.5 https://theagentictimes.org/incidents/suna-message-queue-api-broken-access-control-vulnerability 2026-09-13T17:22:28.68328+00:00 0.5 https://theagentictimes.org/incidents/mcp-ruby-sdk-memory-exhaustion-via-unbounded-session-objects 2026-09-13T17:23:23.132142+00:00 0.5 https://theagentictimes.org/incidents/pydantic-ai-multiple-vulnerabilities-in-versions-1-56-0-2-0-0b5 2026-09-13T17:23:30.135796+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19753-ssrf-in-mcp-rdf-explorer 2026-09-13T17:26:38.276656+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-66012-siyuan-missing-authorization-in-mcp-kernel-endpoint 2026-09-13T17:22:35.797842+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-17433-improper-authorization-in-nanocoai-nanoclaw 2026-09-13T17:22:42.264321+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-9680-alibabacloud-rds-openapi-mcp-server-exposed 2026-09-13T17:22:55.085782+00:00 0.5 https://theagentictimes.org/incidents/better-auth-redirect-uri-validation-bypass-enables-xss 2026-09-13T17:23:39.168804+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-18655-amazon-mq-mcp-server-prompt-injection-vulnerability 2026-09-13T17:23:51.223981+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-amazon-strands-agents-tools 2026-09-13T17:24:03.812309+00:00 0.5 https://theagentictimes.org/incidents/ibm-langflow-oss-multiple-vulnerabilities-cve-2026-17623-et-al 2026-09-13T17:24:13.931775+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19039-command-injection-in-kino-kafkaesque-ssh-mcp-server 2026-09-13T17:24:24.261001+00:00 0.5 https://theagentictimes.org/incidents/multiple-authorization-vulnerabilities-in-microsoft-copilot-products 2026-09-13T17:24:28.973717+00:00 0.5 https://theagentictimes.org/incidents/n8n-mcp-client-ssrf-protection-bypass 2026-09-13T17:25:11.619634+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-17534-kimi-code-ssrf-via-dns-resolution-bypass 2026-09-13T17:22:53.149123+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-18394-incorrect-authorization-in-strands-agents-tools-http-request 2026-09-13T17:23:36.641419+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-67357-arcadedb-mcp-information-disclosure-vulnerability 2026-09-13T17:23:45.287892+00:00 0.5 https://theagentictimes.org/incidents/ouroboros-ai-coding-agent-local-code-execution-via-env-loading 2026-09-13T17:23:57.82639+00:00 0.5 https://theagentictimes.org/incidents/flowise-supply-chain-and-prompt-injection-vulnerabilities 2026-09-13T17:24:10.345791+00:00 0.5 https://theagentictimes.org/incidents/frontmcp-sandbox-escape-via-zod-schema-proxy-invariant 2026-09-13T17:24:21.202419+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19040-server-side-request-forgery-in-missionsquad-mcp-api 2026-09-13T17:24:26.665039+00:00 0.5 https://theagentictimes.org/incidents/meta-ads-mcp-authentication-bypass-and-token-leakage 2026-09-13T17:24:35.035703+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19263-command-injection-in-inquirelab-mcp-bridge-api 2026-09-13T17:24:47.39948+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-72718-goose-ai-agent-arbitrary-command-execution-via-git-config 2026-09-13T17:24:59.012847+00:00 0.5 https://theagentictimes.org/incidents/github-mcp-server-nil-pointer-dereference-denial-of-service 2026-09-13T17:23:00.538326+00:00 0.5 https://theagentictimes.org/incidents/flyto2-core-ssrf-vulnerability-in-http-modules 2026-09-13T17:23:10.52957+00:00 0.5 https://theagentictimes.org/incidents/mcp-ruby-sdk-multiple-vulnerabilities-prior-to-0-23-0 2026-09-13T17:23:17.288947+00:00 0.5 https://theagentictimes.org/incidents/agenticseek-unauthenticated-remote-code-execution-vulnerability 2026-09-13T17:26:31.836329+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-49986-cortex-mcp-arbitrary-code-execution-via-environment-variable 2026-09-13T17:26:44.337118+00:00 0.5 https://theagentictimes.org/incidents/mcp-memory-service-authentication-bypass-in-document-endpoints 2026-09-13T17:26:57.109507+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19984-ssrf-in-jkawamoto-mcp-florence2 2026-09-13T17:27:09.985184+00:00 0.5 https://theagentictimes.org/incidents/mlflow-multiple-vulnerabilities-in-versions-prior-to-3-15-0 2026-09-13T17:27:17.284491+00:00 0.5 https://theagentictimes.org/incidents/command-injection-and-ssrf-vulnerabilities-in-microsoft-copilot 2026-09-13T17:27:30.040787+00:00 0.5 https://theagentictimes.org/incidents/apify-mcp-server-api-token-exposure-via-url-redirection 2026-09-13T17:27:43.618086+00:00 0.5 https://theagentictimes.org/incidents/ai-copilot-content-generator-wordpress-plugin-authorization-bypass 2026-09-13T17:24:41.419357+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19337-server-side-request-forgery-in-mcp-google-search 2026-09-13T17:24:53.289591+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-19516-server-side-request-forgery-in-mcp-grafana 2026-09-13T17:25:05.777078+00:00 0.5 https://theagentictimes.org/incidents/tooljet-authorization-bypass-allows-cross-organization-data-access 2026-09-13T17:25:14.061949+00:00 0.5 https://theagentictimes.org/incidents/cursor-ide-macos-sandbox-escapes-in-auto-run-mode 2026-09-13T17:25:25.460559+00:00 0.5 https://theagentictimes.org/incidents/mcp-atlassian-arbitrary-file-read-vulnerability 2026-09-13T17:25:38.779858+00:00 0.5 https://theagentictimes.org/incidents/hcl-aion-indirect-prompt-injection-leading-to-html-injection 2026-09-13T17:25:47.275166+00:00 0.5 https://theagentictimes.org/incidents/auth-fetch-mcp-ssrf-protection-bypass-via-ipv6-loopback 2026-09-13T17:25:56.893805+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-trigger-dev-platform 2026-09-13T17:26:16.145097+00:00 0.5 https://theagentictimes.org/incidents/papersgpt-for-zotero-rce-via-unsanitized-llm-response 2026-09-13T17:25:32.762723+00:00 0.5 https://theagentictimes.org/incidents/flowise-code-injection-vulnerabilities-in-agent-nodes 2026-09-13T17:25:44.631813+00:00 0.5 https://theagentictimes.org/incidents/jshookmcp-jshook-ssrf-bypass-via-icmp-and-traceroute-tools 2026-09-13T17:25:54.550227+00:00 0.5 https://theagentictimes.org/incidents/prompt-injection-hidden-in-legal-filing-to-manipulate-ai-review 2026-09-13T17:26:04.478247+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-ckan-mcp-server-prior-to-0-4-112 2026-09-13T17:26:50.871589+00:00 0.5 https://theagentictimes.org/incidents/mindsdb-minds-platform-unauthenticated-rce-via-scratchpad-tool 2026-09-13T17:27:03.821495+00:00 0.5 https://theagentictimes.org/incidents/memos-authentication-bypass-via-unset-internal-service-secret 2026-09-13T17:27:13.610157+00:00 0.5 https://theagentictimes.org/incidents/arcadedb-authorization-bypass-in-set-server-setting-mcp-tool 2026-09-13T17:27:23.937194+00:00 0.5 https://theagentictimes.org/incidents/codewhale-multiple-vulnerabilities-in-versions-0-8-41-0-8-63 2026-09-13T17:27:36.545809+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-75130-context7-prompt-injection-via-custom-ai-instructions 2026-09-13T17:27:50.049717+00:00 0.5 https://theagentictimes.org/incidents/splunk-ai-toolkit-privilege-escalation-and-mcp-server-command-execution 2026-09-13T17:27:58.289558+00:00 0.5 https://theagentictimes.org/incidents/ai-agent-by-siteground-wordpress-plugin-authorization-bypass 2026-09-13T17:28:10.190085+00:00 0.5 https://theagentictimes.org/incidents/langbot-mcp-server-rce-via-insufficient-authorization 2026-09-13T17:28:14.920336+00:00 0.5 https://theagentictimes.org/incidents/marimo-code-injection-via-mcp-server-configuration 2026-09-13T17:27:55.690322+00:00 0.5 https://theagentictimes.org/incidents/agno-pythontools-path-traversal-vulnerability-cve-2026-76832 2026-09-13T17:28:04.003013+00:00 0.5 https://theagentictimes.org/incidents/neo-mjs-command-injection-in-filesystemservice-mjs 2026-09-13T17:28:12.490803+00:00 0.5 https://theagentictimes.org/incidents/spring-ai-mcp-streamable-http-server-memory-exhaustion-dos 2026-09-13T17:28:25.781519+00:00 0.5 https://theagentictimes.org/incidents/infracost-symlink-traversal-and-token-disclosure-vulnerabilities 2026-09-13T17:28:36.80297+00:00 0.5 https://theagentictimes.org/incidents/continue-cli-incomplete-denylist-allows-destructive-commands 2026-09-13T17:28:42.992948+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-55529-praisonai-origin-validation-bypass 2026-09-13T17:28:45.541655+00:00 0.5 https://theagentictimes.org/incidents/mcp-shell-multiple-command-execution-vulnerabilities 2026-09-13T17:28:51.51162+00:00 0.5 https://theagentictimes.org/incidents/nextcloud-mcp-server-unauthenticated-webhook-endpoint-allows-index-deletion 2026-09-13T17:28:58.016121+00:00 0.5 https://theagentictimes.org/incidents/browse-mcp-path-traversal-and-arbitrary-file-write 2026-09-13T17:29:04.892816+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-55637-genieacs-mcp-dns-rebinding-vulnerability 2026-09-13T17:29:14.298796+00:00 0.5 https://theagentictimes.org/incidents/path-traversal-in-sublinear-time-solver-and-consciousness-explorer 2026-09-13T17:29:20.596635+00:00 0.5 https://theagentictimes.org/incidents/prompt-injection-in-amazon-strands-agents-tools-python-repl 2026-09-13T17:29:26.30909+00:00 0.5 https://theagentictimes.org/incidents/dradis-ce-ssrf-via-unrestricted-ai-provider-address 2026-09-13T17:29:32.403744+00:00 0.5 https://theagentictimes.org/incidents/mcp-php-sdk-memory-exhaustion-vulnerability 2026-09-13T17:29:38.404639+00:00 0.5 https://theagentictimes.org/incidents/gitlab-ai-gateway-credential-disclosure-vulnerabilities 2026-09-13T17:29:46.388719+00:00 0.5 https://theagentictimes.org/incidents/mcp-go-http-host-header-validation-vulnerability 2026-09-13T17:29:54.137433+00:00 0.5 https://theagentictimes.org/incidents/mcp-router-cli-exposed-mcp-aggregator-without-authentication-by-default 2026-09-13T17:30:07.683071+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-81096-tooluniverse-sandbox-escape-and-unauthenticated-rce 2026-09-13T17:30:16.577762+00:00 0.5 https://theagentictimes.org/incidents/dash-mcp-server-dns-rebinding-via-missing-host-header-validation 2026-09-13T17:30:28.984708+00:00 0.5 https://theagentictimes.org/incidents/servicenow-ai-platform-code-injection-and-sql-injection-vulnerabilities 2026-09-13T17:30:37.733414+00:00 0.5 https://theagentictimes.org/incidents/siyuan-path-traversal-and-path-guard-bypass-vulnerabilities 2026-09-13T17:30:50.211747+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-microsoft-copilot-products 2026-09-13T17:30:54.640214+00:00 0.5 https://theagentictimes.org/incidents/meta-researchers-ai-agent-accidentally-deleted-her-emails 2026-09-13T17:31:07.02559+00:00 0.5 https://theagentictimes.org/incidents/mcp-use-inspector-proxy-ssrf-via-unvalidated-target-url 2026-09-13T17:29:49.071737+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-81093-apify-mcp-server-ssrf-in-get-html-skeleton-tool 2026-09-13T17:30:00.373797+00:00 0.5 https://theagentictimes.org/incidents/dns-rebinding-vulnerability-in-timescale-mcp-tools 2026-09-13T17:30:13.858039+00:00 0.5 https://theagentictimes.org/incidents/telnyx-mcp-server-missing-authentication-on-http-transport 2026-09-13T17:30:22.976213+00:00 0.5 https://theagentictimes.org/incidents/ui-tars-desktop-mcp-servers-bind-to-all-interfaces-without-authentication 2026-09-13T17:30:35.276481+00:00 0.5 https://theagentictimes.org/incidents/agno-remote-code-execution-via-prompt-injection 2026-09-13T17:30:43.596498+00:00 0.5 https://theagentictimes.org/incidents/hatchet-dispatcher-grpc-service-missing-tenant-verification 2026-09-13T17:30:52.474389+00:00 0.5 https://theagentictimes.org/incidents/origin-validation-error-in-ash-ai-mcp-server-allows-dns-rebinding-attacks 2026-09-13T17:31:00.996508+00:00 0.5 https://theagentictimes.org/incidents/cve-2026-82905-ssrf-in-sdcb-chats-mcpcontroller 2026-09-13T17:31:24.287516+00:00 0.5 https://theagentictimes.org/incidents/appium-mcp-server-path-traversal-in-file-write-tools 2026-09-13T17:31:30.091268+00:00 0.5 https://theagentictimes.org/incidents/authorization-bypass-in-runzero-platform-mcp-service 2026-09-13T17:31:34.755874+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-nousresearch-hermes-agent 2026-09-13T17:31:43.848633+00:00 0.5 https://theagentictimes.org/incidents/ssrf-vulnerability-in-github-enterprise-server-management-api 2026-09-13T17:31:46.387939+00:00 0.5 https://theagentictimes.org/incidents/multiple-dos-vulnerabilities-in-zhayujie-cowagent 2026-09-13T17:31:49.154886+00:00 0.5 https://theagentictimes.org/incidents/ckan-mcp-server-multiple-security-vulnerabilities-in-allowlist-and-cache 2026-09-13T17:31:57.044296+00:00 0.5 https://theagentictimes.org/incidents/claude-skill-antivirus-fails-to-analyze-executable-files-in-skill-directories 2026-09-13T17:32:03.600304+00:00 0.5 https://theagentictimes.org/incidents/ntegrals-openbrowser-browser-agent-message-construction-dos 2026-09-13T17:32:05.84217+00:00 0.5 https://theagentictimes.org/incidents/omnigent-multiple-authenticated-rce-and-policy-bypass-vulnerabilities 2026-09-13T17:32:13.511875+00:00 0.5 https://theagentictimes.org/incidents/openchoreo-unauthenticated-cluster-gateway-management-api-access 2026-09-13T17:32:19.334725+00:00 0.5 https://theagentictimes.org/incidents/helicone-vault-key-exposure-via-inadequate-org-validation 2026-09-13T17:32:57.277484+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-simular-ai-agent-s 2026-09-13T17:32:24.223373+00:00 0.5 https://theagentictimes.org/incidents/langgenius-dify-xss-via-redirect-url-parameter-in-splash-layout 2026-09-13T17:32:33.419003+00:00 0.5 https://theagentictimes.org/incidents/cheshire-cat-ai-memory-endpoint-lacks-per-user-filtering 2026-09-13T17:32:44.623331+00:00 0.5 https://theagentictimes.org/incidents/missing-authorization-in-mountdev-ai-mcp-connector-for-wordpress 2026-09-13T17:33:20.846884+00:00 0.5 https://theagentictimes.org/incidents/ckan-mcp-server-information-disclosure-via-verbose-error-reflection 2026-09-13T17:32:30.974107+00:00 0.5 https://theagentictimes.org/incidents/agent-squad-resource-exhaustion-vulnerability-in-streaming 2026-09-13T17:32:38.741099+00:00 0.5 https://theagentictimes.org/incidents/orval-multiple-rce-vulnerabilities-in-code-generation 2026-09-13T17:33:30.257511+00:00 0.5 https://theagentictimes.org/incidents/avideo-api-rate-limit-bypass-via-bot-user-agent-header 2026-09-13T17:35:52.118851+00:00 0.5 https://theagentictimes.org/incidents/knowns-path-traversal-vulnerabilities-in-mcp-tool-arguments 2026-09-13T17:35:58.155296+00:00 0.5 https://theagentictimes.org/incidents/command-injection-and-credential-exposure-in-github-copilot-and-visual-studio-co 2026-09-13T17:36:02.240428+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-n8n-workflow-automation-platform 2026-09-13T17:32:51.209903+00:00 0.5 https://theagentictimes.org/incidents/agentscope-path-traversal-vulnerability-in-localworkspace-add-skill 2026-09-13T17:34:33.728677+00:00 0.5 https://theagentictimes.org/incidents/aider-arbitrary-code-execution-via-malicious-aider-conf-yml 2026-09-13T17:34:45.222806+00:00 0.5 https://theagentictimes.org/incidents/ssrf-vulnerability-in-owl-documentprocessingtoolkit 2026-09-13T17:34:53.428429+00:00 0.5 https://theagentictimes.org/incidents/nightingale-ssrf-vulnerability-in-http-fetch-ai-agent-tool 2026-09-13T17:35:02.577982+00:00 0.5 https://theagentictimes.org/incidents/lavague-0-2-35-remote-code-execution-via-prompt-injection 2026-09-13T17:35:16.052151+00:00 0.5 https://theagentictimes.org/incidents/codewhale-ssrf-bypass-via-dns-pinning-toctou 2026-09-13T17:35:26.736801+00:00 0.5 https://theagentictimes.org/incidents/command-injection-in-tianxi-ai-agent-pc-application 2026-09-13T17:37:03.599408+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-ibm-langflow-oss-1-0-0-1-11-5 2026-09-13T17:37:16.086161+00:00 0.5 https://theagentictimes.org/incidents/broken-access-control-in-agentimus-ai-seo-plugin 2026-09-13T17:32:59.759284+00:00 0.5 https://theagentictimes.org/incidents/ogx-unauthenticated-server-side-request-forgery-via-mcp-tool 2026-09-13T17:33:39.763408+00:00 0.5 https://theagentictimes.org/incidents/roo-code-auto-approve-bypass-vulnerabilities-in-shell-command-parsing 2026-09-13T17:36:12.781786+00:00 0.5 https://theagentictimes.org/incidents/ssrf-vulnerability-in-unstructured-library-url-handling 2026-09-13T17:33:07.054194+00:00 0.5 https://theagentictimes.org/incidents/hermes-agent-rce-via-malicious-git-config 2026-09-13T17:33:15.224118+00:00 0.5 https://theagentictimes.org/incidents/kp-agent-ready-sensitive-data-insertion-vulnerability 2026-09-13T17:33:26.967072+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-ibm-contextforge-and-langflow-oss 2026-09-13T17:34:03.193136+00:00 0.5 https://theagentictimes.org/incidents/lobechat-webhook-signature-verification-bypass-in-qq-and-feishu-adapters 2026-09-13T17:34:05.867479+00:00 0.5 https://theagentictimes.org/incidents/postgres-mcp-pro-0-3-0-restricted-mode-bypass-via-rangefunction 2026-09-13T17:34:12.149963+00:00 0.5 https://theagentictimes.org/incidents/arbitrary-local-file-read-in-firecrawl-mcp-server-3-20-2 2026-09-13T17:34:18.971157+00:00 0.5 https://theagentictimes.org/incidents/excel-mcp-server-path-confinement-bypass-in-stdio-mode 2026-09-13T17:34:24.833691+00:00 0.5 https://theagentictimes.org/incidents/okta-hyperdrive-agent-plugin-authentication-and-logging-vulnerabilities 2026-09-13T17:36:18.977029+00:00 0.5 https://theagentictimes.org/incidents/functype-mcp-server-rce-via-unsanitized-pnpm-install 2026-09-13T17:36:31.04813+00:00 0.5 https://theagentictimes.org/incidents/git-mcp-server-argument-injection-in-git-tools 2026-09-13T17:34:31.671135+00:00 0.5 https://theagentictimes.org/incidents/xiaobei-webhook-endpoint-lacks-authentication-allows-ssrf-attacks 2026-09-13T17:34:39.859949+00:00 0.5 https://theagentictimes.org/incidents/llama-factory-ssrf-vulnerability-in-openai-api-handler 2026-09-13T17:34:51.048509+00:00 0.5 https://theagentictimes.org/incidents/xinference-unauthenticated-arbitrary-path-file-read-vulnerability 2026-09-13T17:34:55.657971+00:00 0.5 https://theagentictimes.org/incidents/ms-swift-4-5-2-ssrf-via-unvalidated-media-urls 2026-09-13T17:35:09.657128+00:00 0.5 https://theagentictimes.org/incidents/codewhale-multiple-critical-vulnerabilities-in-v0-8-37-0-8-63 2026-09-13T17:35:20.733226+00:00 0.5 https://theagentictimes.org/incidents/multiple-vulnerabilities-in-amazon-aws-labs-mcp-servers 2026-09-13T17:35:34.634058+00:00 0.5 https://theagentictimes.org/incidents/eclipse-ankaios-wildcard-authorization-bypass-in-control-interface 2026-09-13T17:35:54.52142+00:00 0.5 https://theagentictimes.org/incidents/asus-control-center-express-agent-missing-authentication-vulnerability 2026-09-13T17:36:00.275766+00:00 0.5 https://theagentictimes.org/incidents/open-webui-vulnerabilities-allow-dos-and-message-tampering 2026-09-13T17:36:34.625693+00:00 0.5 https://theagentictimes.org/incidents/aws-security-agent-mcp-server-s3-bucket-ownership-verification-missing 2026-09-13T17:36:48.47637+00:00 0.5 https://theagentictimes.org/incidents/n8n-multiple-vulnerabilities-in-workflow-execution-and-access-control 2026-09-13T17:36:42.426293+00:00 0.5 https://theagentictimes.org/incidents/server-side-request-forgery-in-mcp-dominican-layer 2026-09-13T17:38:05.309216+00:00 0.5 https://theagentictimes.org/incidents/omniroute-rce-via-unauthenticated-post-api-acp-agents-endpoint 2026-09-13T17:36:58.166582+00:00 0.5 https://theagentictimes.org/incidents/path-injection-in-n8n-elasticsearch-and-elasticsecurity-nodes 2026-09-13T17:37:09.900122+00:00 0.5 https://theagentictimes.org/incidents/mcphub-oauth-2-0-authentication-bypass-vulnerability 2026-09-13T17:37:22.593907+00:00 0.5 https://theagentictimes.org/incidents/langchain-sitemaploader-ssrf-bypass-via-nested-sitemap-entries 2026-09-13T17:38:08.925488+00:00 0.5 https://theagentictimes.org/incidents/cli-mcp-server-command-allowlist-bypass-via-shell-operators 2026-09-13T17:38:14.556892+00:00 0.5 https://theagentictimes.org/incidents/rowboat-fails-to-validate-custom-mcp-server-and-webhook-urls 2026-09-13T17:38:16.517884+00:00 0.5