Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-09 · source-backed
LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK, presented at Black Hat (The Register). Insecure deserialization, SSRF, path traversal, use-after-free. That's the point: prompt-controlled content crosses into trusted framework logic, and then it's just ordinary appsec. A Microsoft Agent Framework checkpoint-deserialization flaw let one user plant a payload via prompt injection that fired when a different user reloaded their session ($10,000 bounty). Google ADK shipped an unauthenticated HTTP API, on by default, that executed arbitrary Python and exposed service-account credentials ($3,133.70). Your agent framework is a web application. Scan it like one.
Each link below shares sources, entities, or timing with this story.
LangChain released LangGraph / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (LangChain released LangGraph); both cover AutoGen, CrewAI, Google ADK, LangGraph; overlapping topics (agent, autogen, google, microsoft).
Linked by a graph relationship (LangChain released LangGraph); both cover CrewAI, Google ADK, LangGraph, Microsoft Agent Framework; overlapping topics (agent, framework).
Linked by a graph relationship (LangChain released LangGraph); both cover AutoGen, CrewAI, LangGraph, SSRF; overlapping topics (agent, autogen).
Check Point criticizes AutoGen / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Check Point criticizes AutoGen); both cover AutoGen, CrewAI, LangChain; overlapping topics (agent, autogen, framework, point).
Linked by a graph relationship (Check Point criticizes AutoGen); both cover AutoGen, Python; overlapping topics (agent, autogen, framework, microsoft).
Linked by a graph relationship (Check Point criticizes AutoGen); both cover AutoGen, Python; overlapping topics (agent, autogen, framework, microsoft).
Check Point criticizes LangChain / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Check Point criticizes LangChain); both cover LangChain, Python; overlapping topics (agent, arbitrary, class).
Microsoft released AutoGen / Shared entity: AutoGen / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft released AutoGen); both cover AutoGen; overlapping topics (agent, arbitrary, autogen, framework, microsoft).