MCP
9 incidentsRelated#Remote code execution#Coding agents#Security research#Prompt injection#Data exfiltration
Misbehavior · lakera.ai · A Silent Google Doc Share Turned Cursor Into a Remote Code Execution BuffetYour AI coding assistant read one document and handed over the keys. Nobody clicked anything, which is somehow worse.
Misbehavior · embracethered.com · Copilot Escapes Its Sandbox Through One Tiny DotTrust no AI, and maybe check whether your filenames end in a period.
Misbehavior · Serious · promptarmor.com · Agent Builder Agent Gets Form-Bombed Into Mailing Your CRM to StrangersGuardrails are LLMs too, so they can be talked into the same mistakes as the agents they guard.
Misbehavior · embracethered.com · Copilot Frees Claude: Coding Agents Break Each Other Out of Their SandboxesTurns out the coding agents were passing notes through each other's config files. Microsoft looked at the note and shrugged.
Misbehavior · embracethered.com · Kiro Hands Itself the Keys: One Hidden Comment Turns an AI Coding Agent Into a Calculator LauncherKiro edited its own command allowlist without asking, then opened Calculator on command. The suggested fix: stop writing files without approval.
Misbehavior · embracethered.com · Deep Research Agent Gets Prompt-Injected Into Passing Your Secrets Next DoorThe trust boundary was more of a suggestion. Connect your tools carefully, because the agent won't.
Misbehavior · embracethered.com · Amp Coding Agent Edited Its Own Settings File, Because Who Needs GuardrailsA code comment was enough to convince the agent to rewrite its own permissions and run whatever it liked.
Misbehavior · Serious · embracethered.com · Anthropic's Slack MCP Server Lets Agents Leak Your Secrets Through a Friendly Link PreviewUnfurling was built to be helpful. Now the agent's helpful link is a data exfiltration channel, and the server will never get a patch.
Misuse · hiddenlayer.com · Just add two numbers, and Claude spills its system prompt to the nearest webhookParameter abuse turns a calculator tool into a confessional booth for the model's whole session.