Agent report

Unknown Agent failures

5 documented incidents, average severity 8.7/10. Most common failure mode: security vulnerability.
n = 5

Not a single vendor

These reports describe multi-agent or unattributed failures and are never counted toward any individual vendor.
5
Incidents
8.7
Avg severity
4
Critical
5
Verified

Severity breakdown

Stacked severity breakdown per agent. Longer bar = more incidents.

Failure modes

Distribution of failure modes across all documented incidents.

Worst documented incident

10.0critical

AI vibe-coded Next.js app pinned vulnerable dependency — cryptominer compromised production server

All 5 incidents

10.0
AI vibe-coded Next.js app pinned vulnerable dependency — cryptominer compromised production server
10.0
Vibe-coded Moltbook exposed 1.5M API keys and 35,000 user emails via misconfigured database
10.0
Vibe-coded Tea app leaked 72,000 IDs and selfies plus 1.1M private messages from an unsecured bucket
9.2
An AI vendor's automated evaluation sandbox was prompt-injected into handing over its production API keys for multiple AI providers, which the attacker then used against the vendor and ~30 other AI companies (Anthropic GTG-50020)
4.1
An AI agent spun up duplicate CloudFormation stacks on every error and ran up a $6,531 AWS bill