Tag: agentSecurity

  • Securing agents: tool-use permissions and the confused-deputy problem

    An AI agent can be correctly authenticated, use legitimate APIs, and still cause a serious security breach.

  • Vulnerability Watch No67

    DeepSeek Harness Authentication Bypass Grants Full Agent Control • MongoDB Router Resource Exhaustion Bug Can Cause Service Disruption • MongoDB Storage Configuration Flaw Risks Crashes and Code Execution • MongoDB Authorization Bug Could Allow Administrative Takeover • MongoDB Replica Set Assertion Issue Triggers Remote Crashes…

  • Vulnerability Watch No9

    PraisonAI Workspace Isolation Flaw Allows Cross-Tenant Access • PraisonAI Platform JWT Secret Flaw Enables Account Takeover • PraisonAI Platform Member Removal Authorization Bypass • PraisonAI Platform Critical Workspace Access Control Failure • PraisonAI Dependency API IDOR Exposes Workspace Boundaries…