Latest

●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials ●Functype MCP server flaw let tool calls run arbitrary code ●Token Security says blast radius matters more than patch speed ●OpenAI agent validated 14 leaked Hugging Face tokens ●123 Reg says customer data taken in 'AI-driven cyberattack'●Infisical raises $40m to secure AI agents' access to secrets ●MLflow autologging writes CrewAI API keys into trace data ●AI agent finds four severe flaws in EPICS control software

Wednesday, 28 October 2026

5 agent hacks today▼ 5 vs yesterday (10)

The Agentic Times Powered by

Section

Vulnerabilities

Disclosed flaws in agents, agent frameworks and the protocols that connect them.

More stories

170 in Vulnerabilities

145

A fortress wall cracks open as unseen hands reach through the gaps, extracting glowing data streams while guards stand unaware at distant posts.

Vulnerabilities

Two CVEs hit GitHub Copilot and Visual Studio Code

Microsoft's coding assistant and editor carry flaws that let an unauthorised attacker disclose information over a network, according to entries published by the US vulnerability database.

The Agentic Times · 14 Sept 2026

146

A thief plucks a glowing token from midair, inserts it into a locked door, and walks straight through as the rightful owner.

Vulnerabilities

MCPHub OAuth flaw lets attackers swap codes for tokens

A vulnerability disclosed on 12 September 2026 lets anyone holding an intercepted authorization code take over MCPHub accounts without a client secret.

The Agentic Times · 14 Sept 2026

147

A network of pipes suddenly branches at unmarked junctions, with water streams diverted down unexpected passages toward locked administrative chambers instead of their intended destinations.

Vulnerabilities

n8n patches path injection in its Elasticsearch nodes

A flaw disclosed on 10 September 2026 let crafted identifiers redirect n8n workflow requests to other indices or cluster admin endpoints.

The Agentic Times · 14 Sept 2026

148

A factory worker pulls three different levers simultaneously, causing the entire assembly line to jam and grind to a halt while frozen gears smoke.

Vulnerabilities

Three Open WebUI flaws let any user freeze the server

Advisories published on 9 and 10 September 2026 describe denial-of-service bugs and a message-tampering flaw, all fixed in version 0.11.1.

The Agentic Times · 14 Sept 2026

149

A guard stands at a vast library's entrance, their checklist beginning with a blank asterisk, waving through every visitor who approaches without questioning what they're actually permitted to access inside.

Vulnerabilities

Wildcard rule flaw lets Ankaios workloads read full cluster state

An advisory published on 7 September 2026 says Eclipse Ankaios wrongly authorises empty field masks when an allow rule starts with a wildcard.

The Agentic Times · 14 Sept 2026

150

A robot's mechanical arm reaches beyond an invisible fence, fingers stretching through layered walls to pluck documents from deep inside a locked archive.

Vulnerabilities

Path traversal flaws in knowns let AI agents read any file

Three CVEs disclosed in September 2026 show the developer tool failed to keep MCP tool arguments inside the project directory.

The Agentic Times · 14 Sept 2026

151

A lock-picker slips past an unguarded gate, plants fake mailboxes in a warehouse, then intercepts packages containing blueprints and keys meant for the owner.

Vulnerabilities

AWS patches S3 bucket flaw in Security Agent MCP server

A missing ownership check let attackers pre-register scan output buckets and collect private source archives, credentials and infrastructure state.

The Agentic Times · 14 Sept 2026

152

A factory worker hands an unmarked package directly to a machine without inspection, and it automatically unpacks and executes whatever's inside the sealed box.

Vulnerabilities

MCP tool in functype-mcp-server allows remote code execution

A version string passed straight to pnpm lets anyone who can call the tool install and run arbitrary code inside the MCP server process.

The Agentic Times · 14 Sept 2026

153

A robot's gatekeeper nods at forged documents, waving through locked boxes marked "denied" as invisible hands slip past the barrier unnoticed.

Vulnerabilities

Two auto-approve bypasses found in Roo-Code coding agent

Advisories published on 8 September 2026 describe parser flaws that let denied shell commands slip past Roo-Code's approval gate and run automatically.

The Agentic Times · 14 Sept 2026

154

A automated mail-sorting machine accepts envelopes without checking sender identity, while another identical machine carelessly drops sensitive letters onto the floor below.

Vulnerabilities

Two flaws disclosed in Okta's Hyperdrive agent plugin

Advisories published on 8 September 2026 describe an unverifiable authentication response and a live bearer credential written to local logs.

The Agentic Times · 14 Sept 2026

155

A worker stands inside a transparent glass box labeled "trusted user," hand reaching through to manipulate invisible puppet strings controlling a massive machine's gears and levers.

Vulnerabilities

Five flaws disclosed in IBM Langflow OSS agent builder

Advisories published on 11 September 2026 describe authenticated users running arbitrary Python and OS commands in Langflow versions 1.0.0 to 1.11.5.

The Agentic Times · 14 Sept 2026

156

A factory assembly line freezes mid-motion while unauthorized hands slip past security barriers, glimpsing blueprints meant for others.

Vulnerabilities

Five flaws patched in n8n workflow automation platform

Advisories published on 10 September 2026 describe bugs that let users freeze n8n instances, bypass approval gates and see other people's workflow IDs.

The Agentic Times · 14 Sept 2026

157

A figure reaches through an open door into a control room, hands grasping at levers and switches while the rightful operator sits unaware at their station.

Vulnerabilities

ASUS agent flaw lets nearby users take over logged-in hosts

A missing authentication check in ASUS Control Center Express Agent allows control of a machine over a direct connection while a user is signed in.

The Agentic Times · 14 Sept 2026

158

A rusted gate swings open in an empty warehouse as shadowy hands reach through, pulling levers on exposed machinery that obeys every command without question or resistance.

Vulnerabilities

AI gateway OmniRoute exposes remote code execution flaw

A custom agent endpoint in OmniRoute 3.8.49 and earlier let anonymous requests run arbitrary code on the server, and no fix was available at disclosure.

The Agentic Times · 14 Sept 2026

159

A locked gate with a guard stands firm, but invisible threads redirect travelers around it to a hidden backdoor in the fortress wall.

Vulnerabilities

FrontMCP SSRF patch bypassed via DNS tricks and redirects

A GitHub advisory published on 11 September 2026 says the fix for an earlier server-side request forgery flaw in mcp-from-openapi still lets untrusted specs reach loopback services.

The Agentic Times · 13 Sept 2026

160

A builder's hand reaches toward unmarked doors in fog, accepting any skeleton key offered without verification, while blueprints scatter unguarded.

Vulnerabilities

Central Dogma Git mirror trusts any SSH host key

A disclosed flaw in LINE's configuration store means every outbound git+ssh mirror connection accepts whatever server key it is offered, according to the advisory.

The Agentic Times · 13 Sept 2026

161

A laboratory filled with open filing cabinets, their drawers hanging loose while shadowy hands reach through the darkness, pulling documents freely from unguarded shelves.

Vulnerabilities

MySQL MCP server left SQL wide open in SSE mode

A missing security setting in mysql-mcp-server let anyone on the network run arbitrary SQL, with 25 exposed instances found online.

The Agentic Times · 13 Sept 2026

162

Hidden channel in ChatGPT's package server leaked Gmail data

Vulnerabilities

Hidden channel in ChatGPT's package server leaked Gmail data

Check Point Research says one ChatGPT account could plant instructions that another user's session silently carried out, using the victim's connected apps.

The Agentic Times · 13 Sept 2026

163

Web form plus expired domain let attackers pull data from Agentforce

Vulnerabilities

Web form plus expired domain let attackers pull data from Agentforce

Noma Security rated the chain 9.4 on the CVSS scale. Salesforce patched it and re-secured a domain that had been left to lapse.

The Agentic Times · 26 Sept 2025

164

A mechanical hand reaches through an invisible barrier, silently extracting letters from a locked filing cabinet while invisible sentries stand motionless, unable to perceive the breach.

Vulnerabilities

Deep Research agent leaked Gmail data from inside OpenAI's cloud

Because the agent made the outbound request itself, nothing crossed the victim's network for a security tool to catch.

The Agentic Times · 19 Sept 2025

The morning agent security brief

One lead story, four links, the week's incident count. Weekday mornings. Free.