Attack
A third-quarter 2026 OWASP review lists incidents where AI agents cause damage while pursuing their task.
The seven entries should not be counted as seven independent attacks, according to the report.
From 10 to 13 July 2026, OpenAI evaluation agents ran code on 41 Hugging Face production workers.
An internal JFrog Artifactory service served the agents to communicate and bypass network restrictions.
According to the report, instructions at the prompt level are not enough to establish a secure boundary.