Week 42 · October 12 to October 18, 2026
AI security this week
In week 42 of 2026 (October 12 to October 18, 2026), The Injection tracked 1 AI security story, including "VerCellBreak: a client certificate carries data out of Vercel Sandbox".
%20(1).png)
Top storyMED
VerCellBreak: a client certificate carries data out of Vercel SandboxVerCellBreak is an egress bypass: a crafted mTLS client certificate turns an allowed server into the agent's exfiltration channel.
What to do · Treat an egress allowlist as a way to reduce risk rather than a boundary that holds, since any allowed endpoint that takes attacker-controlled input and makes its own outbound requests can relay data. AIR recommends filtering what an agent reads so that it is not compromised in the first place. Prefer narrow, single-purpose allowed hostnames, which Vercel's own firewall documentation also advises.
Medium 1
MED
Attack · AIR Security
VerCellBreak: a client certificate carries data out of Vercel SandboxVerCellBreak moves data out of Vercel Sandbox past its domain allowlist. AIR Security hid a secret in a client certificate's Authority Information Access URL, and the allowed server fetched that URL while validating the chain.