The Hacker NewsAug 6, 2026AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model8 min readcve-2026-18236cve-2026-188306