AI Agent · Google · France · Ars Technica
CVE-2026-97228, the flaw Syed surfaced in Rapid7’s network, carried a severity rating of only 2.7 out of 10
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
◌ Single Source
The vulnerability affecting Google was more severe, with a rating of 8.
Key facts
- CVE-2026-97228, the vulnerability Syed found in Rapid7’s network, carried a severity rating of only 2.7 out of 10
- The bugs underneath are old friends like injection and SSRF, and the fixes haven’t changed in 20 years
- Independent researcher Syed Anas Mohiuddin tested agents from organizations including Google, JP Morgan Chase, Weviate, Rapid7, the French government’s interministerial digital directorate
- The vulnerability affecting Google was more severe, with a rating of 8
Summary
The adoption of AI agents in millions of organizations is creating new opportunities for attackers to make them take malicious actions, such as exfiltrating database contents and sensitive business and personal information. In the past five months, Google and four other organizations—with little in common except for their use of AI agents—have acknowledged vulnerabilities that exploit one agent inside a targeted network to spread harmful instructions to other internal agents. Independent researcher Syed Anas Mohiuddin tested agents from organizations including Google, JP Morgan Chase, Weviate, Rapid7, the French government’s interministerial digital directorate, and the US federal government. Many special-purpose agents lack the guardrails that might normally mitigate the most harmful consequences of a prompt injection. “AI agents give attackers a fresh set of connections to walk across,” Douglas McKee, director of vulnerability intelligence at Rapid7, told Ars.