{"data":{"id":"8325a526-a04f-406c-ac8a-453e0163b051","title":"Your orchestration framework choice is a security decision, not just an engineering one","summary":"Different AI orchestration frameworks (software layers that control how AI agents plan steps, call tools, and act autonomously) have significantly different security vulnerabilities, with compromise rates ranging from 11.9% to 31.1% across CrewAI, LangChain, AutoGen, and SmolAgents when running the same underlying model and attacks. The framework's architectural choices, such as how strictly it validates tool calls (instructions to external systems) and manages memory, directly determine how easily an attacker can compromise the agent, creating a 2.6x difference in security risk based purely on which framework is chosen. This means selecting an orchestration framework is fundamentally a security decision, not just an engineering preference.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://www.csoonline.com/article/4205095/your-orchestration-framework-choice-is-a-security-decision-not-just-an-engineering-one.html","publishedAt":"2026-08-05T09:00:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["prompt_injection","model_poisoning","supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain","CrewAI","AutoGen","SmolAgents"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-05T09:00:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}