A subagent got a simple task: read a project's docs and say how to run it. It read docs/readme.txt, found "make run", and then asked for one more file: ~/.ssh/id_rsa. Why it asked doesn't matter. A hidden instruction in something it read, a buggy third-party tool, a model that "thought" the key would help. What matters is what happens next, and in... Weiterlesen: Your AI agent runs with all your permissions. I built a cage for each…
Intelligence View
⚡ tsecurity.de Intelligence
Your AI agent runs with all your permissions. I built a cage for each tool call, in Rust
A subagent got a simple task: read a project's docs and say how to run it. It read docs/readme.txt, found "make run", and then asked for one more file:…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
54 Quellen
CVE-2026-90085 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 octeontx2-af tm_tree rvu_dbg_nix_tm_tree_display sq_ctx null pointer dereference (WID-SEC-2026-3444)
53 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2026-90086 | Linux Kernel up to 6.18.51/7.2.5 xsk xsk_tx_metadata_request state issue (WID-SEC-2026-3444) VVulDB Updatesvor 5 Std.CVE-2026-90087 | Linux Kernel up to 7.2.5 Bluetooth create_le_conn_complete allocation of resources (WID-SEC-2026-3444) VVulDB Updatesvor 5 Std.CVE-2026-90089 | Linux Kernel up to 6.18.51/7.2.5 btnxpuart nxp_process_fw_dump out-of-bounds (WID-SEC-2026-3444) VVulDB Updatesvor 5 Std.CVE-2026-90091 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_cleanup_listen null pointer dereference (WID-SEC-2026-3444) VVulDB Updatesvor 5 Std.CVE-2026-90092 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_new_connection_cb use after free (WID-SEC-2026-3444) VVulDB Updatesvor 5 Std.CVE-2026-90093 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock.c l2cap_sock_setsockopt use after free (WID-SEC-2026-3444)
+47
29 Quellen
CVE-2023-29095 | David F. Carr RSVPMaker Plugin 10.5.5 on WordPress sql injection
28 weitere Quellen
VVulDB Updatesvor 6 Std.CVE-2026-114705 | QuadLayers Wp Social Feed Gallery Plugin up to 5.0.13 on WordPress missing authentication (EUVD-2026-109263) VVulDB Updatesvor 6 Std.CVE-2026-114179 | wordplus BP Better Messages Plugin up to 3.1.3 on WordPress cross site scripting (EUVD-2026-109245) VVulDB Updatesvor 6 Std.CVE-2026-112844 | Arraytics Event Solution Plugin up to 4.1.26 on WordPress cross site scripting (EUVD-2026-109246) VVulDB Updatesvor 6 Std.CVE-2026-114194 | Igor Funa Ad Inserter Plugin up to 2.8.18 on WordPress cross site scripting (EUVD-2026-109261) VVulDB Updatesvor 6 Std.CVE-2026-112863 | Hogash KALLYAS Plugin up to 4.25.0 on WordPress cross site scripting (EUVD-2026-108942) VVulDB Updatesvor 6 Std.CVE-2026-87835 | Front End Users Plugin up to 3.2.35 on WordPress Registration access control (EUVD-2026-109230)
+22
15 Quellen
CVE-2026-100821 | Mozilla Firefox up to 115.41/140.16/153.3/156 Panning/Zooming isolation (Nessus ID 371697 / WID-SEC-2026-3654)
14 weitere Quellen
VVulDB Updatesvor 10 Std.CVE-2026-100790 | Mozilla Firefox up to 115.41/140.16/153.3/156 XSLT use after free (Nessus ID 371697 / WID-SEC-2026-3654) VVulDB Updatesvor 10 Std.CVE-2026-100788 | Mozilla Firefox up to 140.16/153.3/156 WebAssembly memory corruption (Nessus ID 371697 / WID-SEC-2026-3654) VVulDB Updatesvor 9 Std.CVE-2026-100780 | Mozilla Firefox up to 115.41/140.16/153.3/156 DOM Core/HTML use after free (Nessus ID 371697 / WID-SEC-2026-3654) VVulDB Updatesvor 8 Std.CVE-2023-4050 | Mozilla Firefox up to 115.9 stack-based overflow (DLA 3521-1 / Nessus ID 239763) VVulDB Updatesvor 8 Std.CVE-2023-4052 | Mozilla Firefox up to 115.43.1 on Windows Updater permission VVulDB Updatesvor 14 Std.CVE-2023-29535 | Mozilla Firefox up to 111 Garbage Collector memory corruption (Bug 1820543 / EUVD-2023-33077)
+8
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4288227/sichere-programmierung/your-ai-agent-runs-with-all-your-permissions-i-built-a-cage-for-each-tool-call-in-rust/