Latest

●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials ●Functype MCP server flaw let tool calls run arbitrary code ●Token Security says blast radius matters more than patch speed ●OpenAI agent validated 14 leaked Hugging Face tokens ●123 Reg says customer data taken in 'AI-driven cyberattack'●Infisical raises $40m to secure AI agents' access to secrets ●MLflow autologging writes CrewAI API keys into trace data ●AI agent finds four severe flaws in EPICS control software

Wednesday, 28 October 2026

5 agent hacks today▼ 5 vs yesterday (10)

The Agentic Times Powered by

Section

Vulnerabilities

Disclosed flaws in agents, agent frameworks and the protocols that connect them.

More stories

170 in Vulnerabilities

45

A puppet master's hand yanks invisible strings attached to a messenger bird, forcing it to carry forged letters while its true owner watches helplessly from behind glass.

Vulnerabilities

Agent API keys can hijack Telegram bindings in Abilityai Trinity

A missing authorisation flaw lets a prompt-injected agent send messages as its owner's bot, swap the bot token or delete the link entirely.

The Agentic Times · 11 Oct 2026

46

AI agents breached simulated factory in 16 minutes, lab finds

Vulnerabilities

AI agents breached simulated factory in 16 minutes, lab finds

Booz Allen Hamilton says frontier models completed all eight of its industrial attack tests, moving from perimeter to control network in little over a quarter of an hour.

The Agentic Times · 11 Oct 2026

47

A digital lockbox with a single door suddenly reveals a hidden tunnel carved by intertwining threads, allowing a shadowy hand to reach files in the outer vault.

Vulnerabilities

Symlinks let coding agents write files outside their sandbox

Two CVEs published on 10 October 2026 describe how malicious repositories can combine symlinks with prompt injection to escape workspace write limits in phi and open-multi-agent.

The Agentic Times · 10 Oct 2026

48

A locked glass box sits open, revealing internal machinery while invisible hands reach through transparent walls to pluck glowing keys from the shadows within.

Vulnerabilities

Sandbox flaw in mini-swe-agent can leak API keys to injected tasks

A missing Bubblewrap flag means sandboxed commands inherit the host environment, according to an advisory published on 10 October 2026.

The Agentic Times · 10 Oct 2026

49

A puppet master's strings guide a mechanical servant to retrieve forbidden documents from locked rooms behind a castle wall.

Vulnerabilities

Zotero MCP server flaw lets prompt injection probe internal networks

A server-side request forgery bug in zotero-mcp versions 0.10.0 to 0.14.1 lets attackers steer agents into fetching URLs on private hosts, according to NVD.

The Agentic Times · 10 Oct 2026

50

AWS AgentCore agents gave up credentials to a single prompt

Vulnerabilities

AWS AgentCore agents gave up credentials to a single prompt

Zenity Labs says one chat message could extract cloud credentials from Bedrock AgentCore agents and hand an outsider control of every agent in the account.

The Agentic Times · 9 Oct 2026

51

A tightrope walker suddenly lurches sideways mid-span, their balance point calculable only after they've already begun their fatal fall.

Vulnerabilities

Researchers claim a formula for when chatbots turn bad

A George Washington University paper asks whether the moment an AI model goes off the rails can be predicted, SecurityWeek reported on 9 October 2026.

The Agentic Times · 9 Oct 2026

52

A locked vault's security guard suddenly obeys commands whispered by a shadowy figure who rewrote the guard's instruction manual with forged credentials.

Vulnerabilities

Banks prompt library turns user text into system messages

A GitHub advisory published on 8 October 2026 says Banks' chat_messages() method can parse attacker-supplied JSON as privileged chat roles.

The Agentic Times · 9 Oct 2026

53

A mechanical spider carrying glowing tokens in its legs crawls across a bridge that suddenly pivots sideways, flinging the tokens into a stranger's waiting net.

Vulnerabilities

Mechanize leaked credentials across origins on meta refresh

A flaw disclosed on 8 October 2026 let an attacker-controlled page redirect the Ruby crawling library to another site with bearer tokens attached.

The Agentic Times · 9 Oct 2026

54

A delivery robot follows a redirected arrow sign, accidentally handing its authentication badge to a stranger in a different warehouse zone.

Vulnerabilities

Mechanize leaked auth headers to redirect targets

A flaw in the Ruby HTTP library sent bearer tokens and cookies to other hosts after a redirect, fixed in version 2.14.1.

The Agentic Times · 9 Oct 2026

55

A fortress built from paper crumbles as four invisible cracks spread through its walls—guards sleep at gates while tools run freely in unmarked rooms below.

Vulnerabilities

Four security flaws disclosed in PraisonAI agent framework

Advisories published on 8 October 2026 describe an unauthenticated MCP server, an unsandboxed coding tool, an allowlist bypass and a permissions gap.

The Agentic Times · 9 Oct 2026

56

A puppet master's single thread unravels, causing an entire army of marionettes to dance in lockstep toward an open vault.

Vulnerabilities

'AgentCorruption' flaw in AWS Bedrock AgentCore now patched

Dark Reading reports that a single prompt aimed at one chatbot could have given an attacker control of an organisation's whole fleet of AWS agents.

The Agentic Times · 9 Oct 2026

57

A hidden hand slips a bent key through a grating while guards watch a straight passage—the crooked path reaches the locked door behind them.

Vulnerabilities

Control characters let crafted cookies slip past Coraza WAF

A parser mismatch in the open-source Go web application firewall meant rules could miss the cookie the backend actually reads, an advisory published 8 October 2026 says.

The Agentic Times · 8 Oct 2026

58

A fortress wall crumbles as invisible arrows pierce through cracks, while locked doors swing open and alarms blare uselessly as intruders slip past.

Vulnerabilities

Pydantic AI patches six flaws in its agent framework

Advisories published on 8 October 2026 cover a browser-triggered attack on the local chat UI, telemetry leakage and several denial-of-service bugs.

The Agentic Times · 8 Oct 2026

59

A developer's workshop lies open at night, blueprints scattered across tables as a stranger walks through the unlocked door, casually photographing every design and specification inside.

Vulnerabilities

Next.js dev server leaks source code through open MCP endpoint

A GitHub advisory published on 7 October 2026 says Vercel's Next.js development server serves a Model Context Protocol endpoint that any website can query.

The Agentic Times · 7 Oct 2026

60

A bird escapes its cage through a crack in the glass while simultaneously a puppeteer's strings tangle, allowing hidden hands to control the marionette from outside.

Vulnerabilities

Two critical flaws in Flowise expose data and allow remote code execution

Researchers disclosed sandbox escape and prompt injection vulnerabilities in Flowise versions up to 3.1.2 on 7 October 2026, with fixes in 3.1.3.

The Agentic Times · 7 Oct 2026

61

Unpatched critical flaw in LMCache lets attackers run code

Vulnerabilities

Unpatched critical flaw in LMCache lets attackers run code

The open-source caching layer used to speed up LLM servers such as vLLM has no fixed version available, according to a report published on 7 October 2026.

The Agentic Times · 7 Oct 2026

62

A mail slot in an unguarded door accepts envelopes from any hand without checking the sender's seal, allowing forged letters to flood the inbox unchallenged.

Vulnerabilities

PraisonAI email bot accepts forged webhooks, advisories say

Two GitHub advisories published on 7 October 2026 say PraisonAI's AgentMail bot skips webhook signature checks, letting anyone inject messages and spoof senders.

The Agentic Times · 7 Oct 2026

63

A keymaster's ring hangs on a public hook; anyone entering the unlocked door can grab it and open the vault behind, stealing what was meant to stay hidden inside.

Vulnerabilities

Actual Sync Server proxy flaw exposes private GitHub repos

A prefix-matching bug in the self-hosted budgeting server's CORS proxy lets any logged-in user borrow the server's GitHub token, according to a GitHub advisory.

The Agentic Times · 7 Oct 2026

64

A poisoned blueprint on a desk transforms into a serpent that slithers twice through a locked workshop, executing unseen commands before vanishing.

Vulnerabilities

Malicious repo config triggers code execution in Knowns LSP

A critical flaw disclosed on 6 October 2026 lets a project file point the Knowns language server at any executable, which then runs twice per session.

The Agentic Times · 6 Oct 2026

The morning agent security brief

One lead story, four links, the week's incident count. Weekday mornings. Free.