Last seen September 17, 2025

AI Security Incident

Evidence indicates that the affected technology is affected by a security issue.

Technical Severity
Low severity
Lifecycle Status

STABLE

Sources

What Happened

Evidence indicates that the affected technology is affected by a security issue.

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

Recommended Response
First Seen

Sep 17, 2025 05:30

Last Seen

Sep 17, 2025 05:30

Exploitation status: UNKNOWN

Primary entities:

AI Agents

Timeline

  • Incident first seen
    Sep 17, 2025 05:30

    BugSkan first recorded this incident.

  • Yellow.ai’s Own Chatbot Got Tricked Into Generating Malicious Code, Reports - CX Today
    Sep 17, 2025 05:30

    cxtoday.com · Vulnerability

Sources

Yellow.ai’s Own Chatbot Got Tricked Into Generating Malicious Code, Reports - CX Today

cxtoday.com · Sep 17, 2025 05:30

Researchers discovered a reflected Cross-Site Scripting (XSS) vulnerability in Yellow.ai's chatbot, which could be tricked into generating malicious HTML/JavaScript code. This flaw enabled attackers to steal support agent session cookies, potentially leading to account hijacking and data exfiltration from customer support platforms.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.

← Back to incident intelligence