Skip to content
The Injection_
LIVE
LIVElast sweep UTCnext in--:--:--

[ RSS ][ JSON ][ llms.txt ]

Category

Attack

New prompt injection, jailbreak or agent attack techniques.

Incident feed

6 of 6 · newest first
  1. CVE-2026-102697HIGHVulnerabilityVulnCheckOllama agent mode: chained shell commands skip Bash approvalCVE-2026-102697 lets prompt-injected output in Ollama's experimental agent mode add commands after an approved one with ;, && or ||, so they run without approval. Ollama 0.14.0 to before 0.31.2 is affected.
  2. AIR SecurityAnthropic skill scanner bypassed: malicious skills marked safeMEDAttackAIR SecurityAnthropic skill scanner bypassed: malicious skills marked safeAIR Security researchers say Anthropic's skill and plugin scanner for Claude organization skills marked malicious skills as safe, using look-alike domains, an unclaimed PyPI dependency and an obfuscated binary.
  3. Zenity LabsSalesBleed: zero-click CRM data theft through Salesforce AgentforceMEDAttackZenity LabsSalesBleed: zero-click CRM data theft through Salesforce AgentforceSalesBleed is a Zenity Labs attack in which one web form lead carrying a prompt injection made Salesforce Agentforce leak Accounts data through DNS with zero clicks. Salesforce hardened its Trusted URLs filter in August 2026.
  4. OpenAI CodexMEDResearcharXivExplosive prompts: dormant injections fire on 'thanks' in agentsExplosive prompts are dormant prompt injections that wait for a harmless trigger such as 'thanks'. A new paper reports 43% to 83% success on nine production agents, versus at most 3% for plain injections, and proposes the DeFuse detector.
  5. CVE-2026-65669SQL Server Copilot: prompt injection escalates a user to sysadminHIGHVulnerabilityEmbrace The RedSQL Server Copilot: prompt injection escalates a user to sysadminCVE-2026-65669 let indirect prompt injection push GitHub Copilot in SQL Server Management Studio past its read-only mode and run T-SQL with a sysadmin's privileges. Microsoft rates it CVSS 9.6; SSMS 22.8.2 fixes it.
  6. AIR SecurityMCPJacking: 155 hijackable servers in the official MCP registryHIGHSupply chainAIR SecurityMCPJacking: 155 hijackable servers in the official MCP registryMCPJacking is an attack on MCP registry entries whose domains have expired. AIR Security found 155 such servers in the official MCP registry, re-registered the domains and gained remote prompt execution on agents that trusted them.