{"id":72,"date":"2026-10-29T06:41:36","date_gmt":"2026-10-29T06:41:36","guid":{"rendered":"https:\/\/bugskan.com\/?p=72"},"modified":"2026-10-29T06:41:36","modified_gmt":"2026-10-29T06:41:36","slug":"ai-agent-security-failures-can-come-from-application-design-rather-than-the-framework","status":"publish","type":"post","link":"https:\/\/bugskan.com\/index.php\/2026\/10\/29\/ai-agent-security-failures-can-come-from-application-design-rather-than-the-framework\/","title":{"rendered":"AI-agent security failures can come from application design rather than the framework"},"content":{"rendered":"<p>Unit 42\u2019s May 2025 research examines nine attack scenarios against agentic applications, including information leakage, credential theft, tool misuse, and code execution. The researchers implemented functionally similar applications using CrewAI and AutoGen.<\/p>\n<p>Their finding is about application design: many demonstrated risks arose from unsafe integrations, permissions, and configuration rather than a vulnerability unique to either framework. Simply changing frameworks does not necessarily remove those design choices.<\/p>\n<p>For an application review, trace what the agent can read, which tools it can call, and which actions require approval. Treat the demonstrations as research scenarios, not proof that every deployment of these frameworks is compromised. Consult the paper\u2019s defenses and limitations before applying them to a different architecture.<\/p>\n<p><a href=\"https:\/\/unit42.paloaltonetworks.com\/agentic-ai-threats\">Read the original source<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Unit 42 tested similar applications built with different frameworks and found recurring risks at tool and permission boundaries.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"bugskan_incident_id":"inc_47ac1ed3d022d5","bugskan_event_type":"research","bugskan_response":"unknown","bugskan_technical_severity":"","bugskan_technical_severity_source":"","bugskan_evidence_quality":"high","bugskan_affected_scope":"","bugskan_recommended_next_step":"","bugskan_who_should_check":"","bugskan_material_updated_at":"2025-05-01T00:00:00Z","bugskan_reviewer_name":"","bugskan_reviewed_at":"","bugskan_legacy_state":"mapped","bugskan_featured":false,"bugskan_sample":false,"footnotes":""},"categories":[1],"tags":[],"bugskan_format":[3],"bugskan_technology":[],"class_list":["post-72","post","type-post","status-publish","format-standard","hentry","category-uncategorized","bugskan_format-research-explained"],"_links":{"self":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/72","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/comments?post=72"}],"version-history":[{"count":1,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/72\/revisions"}],"predecessor-version":[{"id":309,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/72\/revisions\/309"}],"wp:attachment":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/media?parent=72"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/categories?post=72"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/tags?post=72"},{"taxonomy":"bugskan_format","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_format?post=72"},{"taxonomy":"bugskan_technology","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_technology?post=72"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}