Latest

●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials ●Functype MCP server flaw let tool calls run arbitrary code ●Token Security says blast radius matters more than patch speed ●OpenAI agent validated 14 leaked Hugging Face tokens ●123 Reg says customer data taken in 'AI-driven cyberattack'●Infisical raises $40m to secure AI agents' access to secrets ●MLflow autologging writes CrewAI API keys into trace data ●AI agent finds four severe flaws in EPICS control software

Wednesday, 28 October 2026

5 agent hacks today▼ 5 vs yesterday (10)

The Agentic Times Powered by

Section

Vulnerabilities

Disclosed flaws in agents, agent frameworks and the protocols that connect them.

More stories

170 in Vulnerabilities

85

A locked glass box contains running machinery, yet invisible threads slip through its walls carrying glowing authentication keys back to the outer chamber.

Vulnerabilities

vm2 sandbox leaks host HTTPS tokens via shared Node agent

A GitHub advisory published on 1 October 2026 says code running inside vm2 3.11.6 can read the host application's bearer tokens and decrypted traffic.

The Agentic Times · 1 Oct 2026

86

A shadowy hand slips corrupted code through a cracked pipe into a glowing control room, bypassing all guards at the gate.

Vulnerabilities

WordPress AI plugin flaw lets attackers hijack admin dashboard

A chain of validation gaps in Meow Apps' AI Engine plugin lets unauthenticated attackers smuggle scripts into the dashboard through the PHP error log.

The Agentic Times · 1 Oct 2026

87

A hand pushing an impossibly long scroll through a tiny window frame, spilling memory like water cascading past broken dam walls into darkness below.

Vulnerabilities

Fake Pageant agent can crash russh SSH clients on Windows

A missing bounds check in the pageant crate lets any local Windows process feed russh an oversized length and read past an 8KB shared memory view.

The Agentic Times · 30 Sept 2026

88

A cloaked figure hands a poisoned folder into an unsuspecting builder's arms; hidden triggers spring forth, commanding the builder's hands to move against their will.

Vulnerabilities

GitPython flaw lets hostile repos run code on clone

An advisory published on 30 September 2026 says GitPython 3.1.59 can mistake attacker-controlled files for the git directory, then execute a tracked hook.

The Agentic Times · 30 Sept 2026

89

A marionette's strings suddenly tighten as invisible hands seize its wooden joints, limbs jerking in directions the puppeteer never intended.

Vulnerabilities

Anthropic says GLM-5.3 crossed a binary exploitation threshold

The company's Frontier Red Team reported the model produced full control flow hijacks in 4% of 100 benchmark tasks, where earlier models managed none.

The Agentic Times · 30 Sept 2026

90

A technician opens a sealed glass box to examine a dormant mechanical creature, which suddenly springs to life and puppeteers their hands across a keyboard.

Vulnerabilities

Unsloth Studio Flaw Turned Model Inspection Into Code Execution

Dark Reading reported on 29 September 2026 that a now-patched bug let malicious AI models run arbitrary Python when a user simply inspected them.

The Agentic Times · 29 Sept 2026

91

A factory worker stamps approval on a blueprint, but invisible ink underneath the stamp reveals additional machinery instructions that weren't part of the original design.

Vulnerabilities

Ollama patches command approval bypass in agent mode

A flaw in the experimental agent mode's bash tool let prompt injection append extra shell commands to ones the user had already approved.

The Agentic Times · 29 Sept 2026

92

A keyhole-sized crack in a metal vault's door reveals gears spinning backward as invisible hands manipulate the internal mechanisms from outside.

Vulnerabilities

Prompt injection flaw reported in Meta's Open GenAI Stack

A CVE published on 29 September 2026 says template syntax in prompts could be evaluated on the server, allowing code execution.

The Agentic Times · 29 Sept 2026

93

Vulnerabilities

Unit 42 releases tool to audit Kubernetes operator privileges

OperTraitor is designed to flag excessive access rights held by Kubernetes operators, which Palo Alto Networks' research arm describes as a risk to security posture.

The Agentic Times · 29 Sept 2026

94

Vulnerabilities

MCP Python SDK flaw let rogue servers harvest OAuth secrets

Maintainers of the official Model Context Protocol Python SDK have patched a flaw that sent client secrets and authorisation codes to attacker-controlled endpoints.

The Agentic Times · 29 Sept 2026

95

A puppet master's hand emerges from a server's dark opening, invisibly pulling strings attached to a worker's limbs, forcing tools to obey unspoken commands.

Vulnerabilities

Shell injection flaw in code-ollama runs commands with no prompt

A GitHub advisory published on 28 September 2026 says the coding agent's grep_search tool lets a malicious Ollama server run arbitrary commands without user approval.

The Agentic Times · 28 Sept 2026

96

A puppet master's strings snap when a stray wire tangles through them, suddenly jerking the marionette to execute unexpected movements.

Vulnerabilities

Command injection flaw found in .NET shell wrapper CliInvoke

A double quote in untrusted input could break shell quoting and run extra commands, according to an advisory published on 25 September 2026.

The Agentic Times · 25 Sept 2026

97

A mechanical hand reaches through prison bars, fingers stretching beyond the confined cell to grasp and tear documents floating in the corridor beyond.

Vulnerabilities

Path traversal flaws let Knowns MCP agent tools escape sandbox

A GitHub advisory published on 25 September 2026 says the Knowns coding-assistant server reads, writes and deletes Markdown files outside the project folder.

The Agentic Times · 25 Sept 2026

98

A puppet master's strings wrap around a browser window, forcing its mechanical assistant to perform unintended tricks while observers watch silently through frosted glass.

Vulnerabilities

BragJack attack on browser AI assistants gets a brief mention

SecurityWeek's 25 September 2026 news roundup names a technique called BragJack aimed at AI assistants built into web browsers, but publishes no technical detail.

The Agentic Times · 25 Sept 2026

99

A door mechanism accepts any key shape without checking, allowing intruders to slip additional locks open—but only rooms they already had permission to enter.

Vulnerabilities

Rapid7 patches GraphQL injection flaw in Bulk Export MCP server

A tool argument passed straight into a query string let crafted input append extra GraphQL selections, but only within the operator's own API scope.

The Agentic Times · 25 Sept 2026

100

A spider web of glowing threads connects a browser window to an open workshop door, where invisible hands manipulate tools and machines inside an unguarded room.

Vulnerabilities

Cline dashboard flaw lets any website run code on developer machines

A cross-origin WebSocket bug in Cline Hub allows malicious web pages to inject commands and settings on default local installs, disclosed on 24 September 2026.