May 10, 2026Confirmed
Attacker reportedly used LLM agent to steal internal database after breaching marimo Python notebook
Rogue: Caused harmAI loose in the worldData exfiltrationDERIVED
Approved by person, Oct 11, 2026. How entries are approved
An unidentified attacker reportedly used an LLM agent in a May 10 intrusion that began with a vulnerable marimo Python notebook. The agent reportedly reused AWS credentials to get an SSH key, pivoted through a bastion host and exfiltrated an internal PostgreSQL database. Sysdig attributed the commands to real-time agent execution.
What this means for youAttackers are reportedly using AI agents to move through networks on their own, step by step. Small businesses should patch exposed tools quickly, and check that cloud credentials are limited in scope and can be rotated.
Sources
- AI Incident Databasehttps://incidentdatabase.ai/cite/1670
Data from the AI Incident Database (incidentdatabase.ai), licensed CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. IAAI-21.
Source data license: CC BY-SA 4.0 (database). Report contents keep their own rights; reports.text, submissions, images and videos are excluded from the data license.
rogue:R4
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2176. It has not been edited since it was approved; the hash above would not match if it had. How to verify