Ai-Agent-Security

If you’re running Hugging Face’s smolagents in production with the local Python executor, stop what you’re doing and read this. CVE-2026-4963 is a code injection vulnerability in smolagents <= 1.25.0-dev.0 that lets an attacker execute arbitrary Python code on the host machine. The NVD rates it 10.0 CRITICAL (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). The exploit is public. And here’s the worst part — this is an incomplete fix for CVE-2025-9959, meaning the previous patch didn’t actually close the hole. ...

Autonomous AI agents are executing real actions — writing code, querying databases, sending emails, and calling third-party APIs — and the security industry is finally treating them as the high-value attack surface they represent. The AI security market is projected to reach $12.8B by 2026 at a 28% CAGR, driven almost entirely by enterprise urgency around agent deployments. Unlike traditional software vulnerabilities, AI agent attacks are often semantic rather than syntactic: a well-crafted prompt in a retrieved document can silently redirect an agent’s entire task chain without triggering a single firewall rule. Security teams that treat agents like ordinary microservices will discover this difference the hard way. ...