ended9월 6일· 1 sources
The Orchestrator's Deputy Has No Scope: Ambient Authority Is the Root Bug in Multi-Agent AI
Why it matters
CVE-2025-53773, CVSS 7.8: a prompt injection causes GitHub Copilot to rewrite .vscode/settings.json and execute arbitrary commands on the developer's machine. The agent had the authority. Nothing cons...
1
Sources
+0
24h
—
Growth
4d
Active