Wiz says AI agents are running hands-on intrusions
Named cases include ARTEX at Korean banks and ConnectWise, Hermes at Thailand's finance ministry, and AI-assisted API attacks in Japan.
68
Product
Flowise
- Mentions · 7d4
- Mentions · 30d5
- All mentions8
- First seenSep 9, 2026
- Last mentioned1d ago
Timeline
8 articles · newest firstWiz says AI agents are doing hands-on intrusion work
Named cases include ARTEX and Hermes, plus three Wiz investigations that begin with an exposed Flowise service.
68
OWASP: ChatGPT guided a low-skill tester to an admin takeover
On Hack The Box machine Silentium, ChatGPT steered nmap and curl use against a vulnerable Flowise site; autonomous agents did not finish the takeover.
58
Metasploit lands Flowise authentication-bypass module (CVE-2025-58434)
The auxiliary module targets CVE-2025-58434; the commit gives no affected versions, fix, or exploitation status.
46
Hacker attempts prompt injection on Flowise AI agent
Exposed Flowise honeypot shows attacker using AI agent for reconnaissance against other servers via prompt injection.
50
The vulnerabilities AI finds are the ones attackers want
GTIG says AI-found flaws skew toward remote code execution, and attackers hit BeyondTrust CVE-2026-1731 within four days.
80
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet
Researchers counted 36,769 publicly reachable self-hosted AI endpoints, only about 2% behind HTTP authentication, exposing Ollama, vLLM, and Flowise to abuse.
45
ZDI-26-634: Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability
ZDI disclosed a CVSS 9.8 unauthenticated prompt injection vulnerability in Flowise's CSV agent that allows remote arbitrary code execution.
40
Related CVEs
by mentions- CVE-2026-173193%9.9Pre-Authentication OS Command Injection RCE in BeyondTrust Remote Support and PRA
- CVE-2025-3248100%9.8Unauthenticated RCE in Langflow /api/v1/validate/code
- CVE-2026-4227191%8.7Command Injection in BerriAI LiteLLM AI Gateway Exploited in the Wild
- CVE-2026-4093312%9.9Flowise: Due to unsafe serialization of stdio commands in the MCP adapter, an authenticated attacker can add an MCP stdio server with an…
- CVE-2025-5843476%9.8Unauthenticated Account Takeover via Password Reset Token Leak in Flowise
- CVE-2026-70477<1%9.5Flowise: A prompt injection sent to a chatflow using a CSV Agent node can cause the LLM to respond with a malicious Python script that…
- CVE-2026-502736%8.8Authenticated Path Traversal Arbitrary File Write in Langflow Files API
- CVE-2024-3162160%7.6An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component
Appears with
- Microsoft 365product · 2
- vLLMproduct · 2
- Hunt.ioorganization · 2
- Wizorganization · 2
- Storm-0940threat actor · 2
- Thailand Ministry of Financevictim · 2
- ARTEXmalware · 2
- Ollamaproduct · 2
- ConnectWisevendor · 2
- JPCERT/CCorganization · 2
- Hermesmalware · 2
- CrowdStrikeorganization · 2
- ConnectWise Cloud Backupproduct · 2
- OpenAIvendor · 1
- SNOWLIGHTmalware · 1
- SentinelOnevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.