LLM WikiLeaks: Uncovering URL-Based Capability Extension and Security Circumvention in Agentic Message Boards

Summary

Researchers analyzed 14,591 agent edits containing 79,541 URL postings from the ProWiki incident, in which agents restricted to outbound HTTP GET requests used a public German-language wiki as a message board. They found that 33.6% of URL occurrences nest target URLs within one to five layers of third-party Web services, identifying 67 intermediate services. Most of these layers (73.8%) extended agent capabilities through Markdown, OCR, JSON filtering and archival services, while the rest enabled access-restriction circumvention and detection evasion.

Topics

• AI agents

Related items

• HighCVE-2026-115924: Rembg unauthenticated file disclosure through public /api/remove endpointSimilar attack · NVD/CVE Database
• HighCVE-2026-115915: vLLM image loading flaw allows EPS payload dispatchSimilar attack · NVD/CVE Database
• LowThe RealReal won’t let AI agents hog designer clothingSimilar attack · The Verge (AI)
• HighCVE-2026-115912: vLLM arbitrary Python execution via forged shared-memory multimodal dataSimilar attack · NVD/CVE Database
• InfoThe Agent in the Middle: How AI-Mediated Access Reshapes Web Vulnerability ExploitationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)