{
  "id": 193566,
  "title": "Prompt injection isn't the bug, AI agent frameworks are",
  "url": "https://urgent.news/2026/08/05/prompt-injection-isnt-the-bug-ai-agent-frameworks-are-193566",
  "topic": "ai",
  "section": "AI",
  "published": "2026-08-05T21:35:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/08/05/prompt-injection-isnt-the-bug-ai-agent-frameworks-are/5283585"
  },
  "original_language": "en",
  "account": "A group of researchers from Check Point have discovered a series of critical vulnerabilities in major AI agent frameworks used by enterprises to build applications. These issues, which include insecure deserialization, server-side request forgeries, path traversals, and use-after-free, extend beyond prompt injection and affect the underlying framework logic. The researchers spent a year attempting to exploit various frameworks, such as LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK, and found 11 vulnerabilities in total. Although these are old threats, the problem lies in the \"plumbing around the model,\" as researchers Yarden Porat and Shahar Tal explain. They argue that defenders should assume prompt injection will occur, as many AI frameworks fail to properly secure injected content. A critical example is the Check Point team discovering a critical checkpoint deserialization bug in Microsoft Agent Framework which allows remote code execution. Other vulnerabilities found, such as those in Google ADK, resulted in partial fixes and no CVE issuance. Overall, the researchers highlight the need for better framework security, as the vulnerabilities are not limited to a single vendor or framework, but rather a systemic issue across various platforms.",
  "summary": "Check Point researchers tried to break the frameworks enterprises use to build AI apps. Now they're telling Black Hat attendees what they found",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register",
        "title": "Prompt injection isn't the bug, AI agent frameworks are",
        "url": "https://urgent.news/2026/08/05/prompt-injection-isnt-the-bug-ai-agent-frameworks-are",
        "published": "2026-08-05T21:35:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}