Latest

●MLflow autologging writes CrewAI API keys into trace data ●AI agent finds four severe flaws in EPICS control software ●Researchers say 44 AI agents drove attacks on Japanese targets ●New 'Aokigahara' stealer goes after AI assistant sessions ●Warp discloses breach exposing AI agent logs and telemetry ●Strands Agents leaves agent session files open to local attackers ●Broken escape function lets documents wipe GraphRAG databases ●Three MCP servers let agents be tricked into running shell commands

Wednesday, 28 October 2026

1 agent hack today▼ 9 vs yesterday (10)

The Agentic Times Powered by

Section

Vulnerabilities

Disclosed flaws in agents, agent frameworks and the protocols that connect them.

More stories

169 in Vulnerabilities

25

A sponge absorbs seawater endlessly, swelling beyond its limits until it ruptures, draining a lighthouse's power supply.

Vulnerabilities

russh SSH agent flaw lets attackers exhaust memory

A disclosed vulnerability in the russh library lets an agent peer convert megabytes of traffic into gigabytes of memory use, crashing the key agent.

The Agentic Times · 19 Oct 2026

26

A thief slips through an unlocked gate, stepping into another person's partially-built structure, while a master key hangs openly on the wall.

Vulnerabilities

Envoy AI Gateway flaw lets attackers hijack MCP sessions

A security advisory published on 19 October 2026 says the gateway never checks who owns a session on resume, and its Helm chart ships a publicly known encryption seed.

The Agentic Times · 19 Oct 2026

27

A puppet master's invisible strings guide a headless chrome mannequin to peer behind a locked factory door, extracting glowing data cards from the shadows within.

Vulnerabilities

Prompt injection turns crewAI scraping tool into an SSRF gateway

A flaw disclosed on 19 October 2026 lets attackers steer crewai-tools' headless browser at cloud metadata endpoints to pull internal data and credentials.

The Agentic Times · 19 Oct 2026

28

A small bronze key slips through a guard's fingers at a checkpoint, unlocking a sealed laboratory door where sensitive instruments lay exposed to unauthorized hands.

Vulnerabilities

Arcane agent token slips past admin check on debug endpoint

An advisory published on 16 October 2026 says environment-scoped tokens in Arcane v2.10.2 can reach Go profiling routes meant for global administrators only.

The Agentic Times · 16 Oct 2026

29

A fortress gate stands wide open, accepting unmarked letters from strangers while broadcasting its replies to empty streets below.

Vulnerabilities

CKAN MCP server UI panel accepts messages from any origin

A GitHub advisory published on 16 October 2026 says the ckan-mcp-server data table panel neither checks who sends it messages nor restricts who receives its own.

The Agentic Times · 16 Oct 2026

30

A puppet master's strings tangle through a compression machine, foreign hands steering the controller while the operator watches helplessly from behind glass.

Vulnerabilities

Prompt injection flaw reported in DeepSeek Harness compaction

A CVE published on 16 October 2026 says crafted external content can hijack the context-compaction feature of DeepSeek's command-line harness.

The Agentic Times · 16 Oct 2026

31

Prompt injection turns up in website HTTP headers, study finds

Vulnerabilities

Prompt injection turns up in website HTTP headers, study finds

Signals Corps sampled 217 million web responses and found about 30 sites hiding instructions for AI agents in custom headers, most of them jokes.

The Agentic Times · 16 Oct 2026

32

A single worker pulls one thread in a vast tapestry of interconnected gears, causing the entire machine to seize and collapse into stillness.

Vulnerabilities

Nezha dashboard can be crashed by any low-privilege member

A reported race condition lets a single ordinary user take down the whole monitoring instance, knocking out every tenant's web UI, API and agents.

The Agentic Times · 15 Oct 2026

33

A server room fills with stacked filing cabinets growing taller and taller, each drawer labeled with different client names, until the structure topples under its own weight.

Vulnerabilities

MCP Python SDK kept sessions forever, letting memory run out

An advisory published on 15 October 2026 says Streamable HTTP servers in the default stateful mode never reclaimed session state, so any reachable client could grow memory without bound.

The Agentic Times · 15 Oct 2026

34

A locked safe door swings open as a second key holder bypasses the vault's security gates, reaching past the guardian's checkpoint into restricted chambers.

Vulnerabilities

Nginx UI flaws let MCP tools skip config security checks

Three authenticated vulnerabilities disclosed on 15 October 2026 let secondary users bypass directive validation and OTP step-up through Nginx UI's MCP interface.

The Agentic Times · 15 Oct 2026

35

Decision models fall to prompt injection, HiddenLayer finds

Vulnerabilities

Decision models fall to prompt injection, HiddenLayer finds

Security firm HiddenLayer says TypeSafe AI's Jev model hijacked a simulated store checkout after a fake ad told a browser agent to confirm its price.

The Agentic Times · 15 Oct 2026

36

A thief slips past a guard booth by accessing the master keyring instead of the single key intended for today's delivery, opening every door in the building.

Vulnerabilities

IntentKit flaw lets outsiders trigger wallet transfers

CVE-2026-76066 covers IntentKit through version 2.6.3, where the executor checks tool calls against the full registry rather than the narrowed per-request list.

The Agentic Times · 15 Oct 2026

37

AI agents built a full Chrome exploit chain in six days

Vulnerabilities

AI agents built a full Chrome exploit chain in six days

Security firm XBOW says it used OpenAI's publicly available GPT-5.6 Sol model to chain three unknown Chrome bugs, earning Google's top $250,000 bounty.

The Agentic Times · 14 Oct 2026

38

AI pentesting agent finds OTP bypass on insurer's live site

Vulnerabilities

AI pentesting agent finds OTP bypass on insurer's live site

A report published on 14 October 2026 says the agent worked unaided during an authorised assessment, and that proving the flaw was harder than exploiting it.

The Agentic Times · 14 Oct 2026

39

Microsoft patches code execution flaw in Visual Studio Copilot

Vulnerabilities

Microsoft patches code execution flaw in Visual Studio Copilot

A path validation bypass let the Copilot coding agent write to its own settings files and run arbitrary commands, according to the researcher who reported it.

The Agentic Times · 14 Oct 2026

40

A guard robot's checklist flutters away in wind as shadowy hands slip forbidden tools past its outstretched arms into an open workshop door.

Vulnerabilities

Five flaws let Roo Code auto-approve banned shell commands

Researchers say prompt injection can trick the coding agent's allowlist into running denied commands on a developer's machine without any prompt.

The Agentic Times · 13 Oct 2026

41

A swarm of small mechanical spiders crawls across interconnected smart devices, each one duplicating itself and leaping to the next box in an unstoppable chain reaction across a dark network.

Vulnerabilities

Anthropic warns small AI models may self-replicate on IoT devices

Experiments described by the company found that cheap television boxes can run capable models, raising the prospect of AI spreading between devices without human help.

The Agentic Times · 13 Oct 2026

42

A robot's hand bypasses the security checkpoint, writing directly into a locked filing cabinet while guards watch the front door, oblivious.

Vulnerabilities

Nginx UI patches MCP tool that skipped config safety checks

A tool exposed to AI agents wrote nginx configuration straight to disk without the validation applied to every other write path, according to an advisory published on 12 October 2026.

The Agentic Times · 12 Oct 2026

43

A guard stands before a locked gate holding a list of approved visitors, but a cloaked figure slips through by hiding behind a punctuation mark the guard failed to notice.

Vulnerabilities

Command whitelist in mac-shell-mcp bypassed with a semicolon

CVE-2026-108953 lets MCP clients slip shell metacharacters into arguments and run commands the server was meant to block.

The Agentic Times · 12 Oct 2026

44

A puppet master's hand yanks invisible strings attached to a messenger bird, forcing it to carry forged letters while its true owner watches helplessly from behind glass.

Vulnerabilities

Agent API keys can hijack Telegram bindings in Abilityai Trinity

A missing authorisation flaw lets a prompt-injected agent send messages as its owner's bot, swap the bot token or delete the link entirely.

The Agentic Times · 11 Oct 2026

The morning agent security brief

One lead story, four links, the week's incident count. Weekday mornings. Free.