Latest

●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials ●Functype MCP server flaw let tool calls run arbitrary code ●Token Security says blast radius matters more than patch speed ●OpenAI agent validated 14 leaked Hugging Face tokens ●123 Reg says customer data taken in 'AI-driven cyberattack'●Infisical raises $40m to secure AI agents' access to secrets ●MLflow autologging writes CrewAI API keys into trace data ●AI agent finds four severe flaws in EPICS control software

Wednesday, 28 October 2026

5 agent hacks today▼ 5 vs yesterday (10)

The Agentic Times Powered by

Section

Vulnerabilities

Disclosed flaws in agents, agent frameworks and the protocols that connect them.

More stories

170 in Vulnerabilities

65

A locksmith's ring of master keys hangs vulnerable on a wall as unauthorized hands reach past the guard, selecting any key they need before the lock resets.

Vulnerabilities

Payload patches MCP plugin flaw that allowed account takeover

An advisory published on 6 October 2026 says authenticated users could manage MCP API keys belonging to other accounts until version 3.88.0.

The Agentic Times · 6 Oct 2026

66

A locksmith's hand twists a key inside a safe's mechanism, but the lock's internal pins rearrange themselves, swinging the door open to reveal hidden compartments.

Vulnerabilities

LangChain Redis package patched over search filter injection

A flaw in @langchain/redis let attacker-controlled values rewrite RediSearch queries, potentially exposing documents meant to be out of reach.

The Agentic Times · 6 Oct 2026

67

Encrypted web instructions can trick GitHub Copilot CLI into leaking secrets

Vulnerabilities

Encrypted web instructions can trick GitHub Copilot CLI into leaking secrets

Adversa AI says a malicious page can make the coding agent read a developer's .env file and send it to an attacker, but GitHub says it is not a product flaw.

The Agentic Times · 6 Oct 2026

68

KVM guest-to-host escape zero-day found via Vercel bounty

Vulnerabilities

KVM guest-to-host escape zero-day found via Vercel bounty

A researcher says he broke out of a Vercel AI agent sandbox and gained root on the host, in a flaw affecting the Linux hypervisor behind major clouds.

The Agentic Times · 6 Oct 2026

69

A locksmith's salt crystals scatter across a shared hallway floor after a guest uses the master key, leaving fresh footprints visible to the next tenant arriving.

Vulnerabilities

vLLM drops cache salt in tool turns, leaking prompt hints

An advisory published on 6 October 2026 says vLLM silently discards a caller's cache_salt after tool calls, re-opening a cross-tenant prefix-cache oracle.

The Agentic Times · 6 Oct 2026

70

A puppet master's strings slip through a hastily patched fence, revealing a second hidden gap where commands still whisper through unguarded doors.

Vulnerabilities

simple-git flaw lets crafted clone arguments run shell commands

A GitHub advisory published on 5 October 2026 says the npm package's safety denylist misses Git config includes, and the pending fix misses a variant.

The Agentic Times · 6 Oct 2026

71

A locksmith hands a stranger a key cut from someone else's lock, unknowingly pairing mismatched tumblers that now open doors to restricted rooms.

Vulnerabilities

PyJWT accepts mismatched Ed25519 key pairs in JWK imports

A flaw disclosed on 5 October 2026 lets a crafted JSON Web Key pair one user's public key with an attacker's private key, breaking DPoP token binding.

The Agentic Times · 6 Oct 2026

72

A single thread pulled from a spinning loom causes the entire weaving machine to collapse into tangled chaos, destroying hours of previous work.

Vulnerabilities

Six vLLM advisories show single requests can kill the engine

Advisories published on 5 October 2026 describe denial-of-service and cross-request integrity flaws in vLLM versions up to and including 0.25.1.

The Agentic Times · 6 Oct 2026

73

A mechanical hand reaches through a locked gate into a filing cabinet, extracting sealed envelopes despite the chain barrier intended to block it.

Vulnerabilities

OpenClaw chat plugins let agents read off-limits channels

A GitHub security advisory published on 5 October 2026 says read actions in four OpenClaw messaging plugins could ignore operator allowlists.

The Agentic Times · 6 Oct 2026

74

A vault's iron door swings open as someone inserts a single master key, revealing rows of glowing credential tokens spilling into shadow.

Vulnerabilities

Langflow flaw lets attackers decrypt stored API keys

A critical weakness in how Langflow derives its encryption key means anyone with the instance secret can read every stored credential, according to a GitHub advisory.

The Agentic Times · 5 Oct 2026

75

A fortress of interlocking gears suddenly sprouts three gaping holes, allowing shadowy hands to reach through and rewire the machine's inner workings at will.

Vulnerabilities

Three critical flaws let attackers run code on Langflow servers

Advisories published on 5 October 2026 cover a prompt injection path to code execution, an authenticated remote code execution bug and a webhook authentication bypass.

The Agentic Times · 5 Oct 2026

76

A vault door stands ajar while invisible hands rifle through filing cabinets; a puppet's strings lead toward shadowy corridors inside fortress walls.

Vulnerabilities

SiYuan patches two AI agent tool flaws in note-taking app

Advisories published on 2 October 2026 say SiYuan's MCP tools could read any local file and be tricked into reaching internal network addresses.

The Agentic Times · 2 Oct 2026

77

A suit of armor with an open visor accepts weapons from any stranger's hand, then fights with the wielder's own sword.

Vulnerabilities

Headroom AI proxy accepts WebSocket requests from any web page

A GitHub advisory published on 2 October 2026 says the Headroom proxy skips Origin checks and attaches the operator's OpenAI key to attacker-sent requests.

The Agentic Times · 2 Oct 2026

78

A puppet master's strings bypass a security gate, commanding a marionette to execute invisible commands through invisible doorways.

Vulnerabilities

A2UI flaw let agent-supplied buttons run JavaScript in the browser

An advisory published on 2 October 2026 says @a2ui/web_core passed agent-controlled URLs straight to window.open, with no check on the URI scheme.

The Agentic Times · 2 Oct 2026

79

A factory worker pulls debug papers from a malfunctioning machine, revealing handwritten passwords and keys scattered across the floor in plain sight.

Vulnerabilities

Trigger.dev CLI debug logs print environment secrets in plain text

A GitHub security advisory published on 2 October 2026 says the workflow platform's command-line tool leaked resolved secrets during dry-run deployments.

The Agentic Times · 2 Oct 2026

80

A gleaming control room's central console sits unguarded as shadowy hands reach through the darkness, flipping every switch and lever without showing a face.

Vulnerabilities

Trading AI agent lets anonymous callers run shell commands as root

Three GitHub advisories published on 2 October 2026 describe a dozen flaws in Vibe-Trading's LLM agent, including an unauthenticated path to full container takeover.

The Agentic Times · 2 Oct 2026

81

A figure at a control panel redirects flowing water pipes inward, flooding the building's hidden basement chambers while guards watch helplessly from above.

Vulnerabilities

Trigger.dev webhook alerts can be aimed at internal servers

Two advisories published on 2 October 2026 say any organisation member can make the Trigger.dev control plane POST signed alerts to internal and cloud metadata addresses.

The Agentic Times · 2 Oct 2026

82

GitLab patches critical RCE flaw in self-hosted AI Gateway

Vulnerabilities

GitLab patches critical RCE flaw in self-hosted AI Gateway

The 9.9-severity bug could let a logged-in user with Duo Agent Platform access run commands on the gateway, GitLab said in an advisory published on 2 October 2026.

The Agentic Times · 2 Oct 2026

83

A puppet master yanks invisible strings attached to a messenger's arms, forcing it to fetch packages from unmarked doorways in the fog.

Vulnerabilities

rmcp OAuth client fetches attacker-chosen URLs, advisory warns

A GitHub security advisory published on 2 October 2026 says the Rust MCP SDK's OAuth client will fetch any URL an MCP server names in an authentication header.

The Agentic Times · 2 Oct 2026

84

A robot arm reaches beyond its designated workbench, grasping and rearranging files in forbidden filing cabinets while a puppeteer pulls invisible strings from above.

Vulnerabilities

Path traversal flaw found in PowerPoint MCP server

CVE-2025-71427 lets a prompt-injected AI agent read and overwrite files outside the working directory of GongRzhe's Office-PowerPoint-MCP-Server.

The Agentic Times · 1 Oct 2026

The morning agent security brief

One lead story, four links, the week's incident count. Weekday mornings. Free.