Question of the day
Critical flaws this month sat in agent plumbing rather than models: Langflow code injection (CVSS 9.8), a GitLab AI Gateway sandbox escape (9.9), missing authentication in AWS Loom (10.0) and MCP server command injection. Is agent tooling on the same patching and asset register as the rest of your estate, or does it live outside it?
No replies yet
Anyone can read the thread. Replying is for AISAT members. Sign in to join in, or apply if you have not already. It is free. Most applications are approved the same day. Around meetup weeks and holidays it can take a day or two.