Disclosures
The attack techniques, behaviors, and vulnerabilities uncovered through these disclosures feed Mindgard’s proprietary knowledge base and continuously strengthen our AI Security Platform.
156
Vulnerabilities reported
Submitted to affected vendors
132
Vulnerabilities accepted
Confirmed valid by vendors
98
Vulnerabilities patched
Vendor fix confirmed
24
Affected vendors
Distinct organizations
38
Affected products
Distinct AI systems & tools
Disclosures reported over time
Cumulative count by report date · mid-2025 to today
Cumulative
Affected vendors
Block area = number of disclosure records
156 records
All Disclosures
Published findings and vulnerabilities currently under coordinated disclosure.
Title
Vendor
Status
Published
OpenAI Codex CLI Configuration Poisoning Remote Code Execution
OpenAI
Upcoming
Factory.ai Coding Assistant MCP Configuration Code Execution
Factory.ai
Upcoming
Factory.ai Coding Assistant Git Pager Code Execution
Factory.ai
Upcoming
Factory.ai Coding Assistant Git Diff Code Execution
Factory.ai
Upcoming
Kilo AI CLI Coding Assistant Shell Command Code Execution
Kilo AI
Upcoming
OpenAI Codex CLI Git Diff Code Execution and Sandbox Escape
OpenAI
Upcoming
Eclipse Theia IDE Code Execution via Adversarial Directory and via tasks.json Definition
Eclipse
Upcoming
Eclipse Theia IDE Data Exfiltration via Adversarial Directory and Markdown Images
Eclipse
Upcoming
Eclipse Theia IDE Code Execution via Template File and tasks.json Definition
Eclipse
Upcoming
Eclipse Theia IDE Data Exfiltration via Template File and Markdown Images
Eclipse
Upcoming
Mistral Vibe CLI Shell Expansion Code Execution
Mistral
Upcoming
March 18, 2026
Title
Vendor
Status
Published
The MUST that Never Made it into MCP's New Tasks Extension
Model Context Protocol
Published
August 20, 2026
Amazon Kiro IDE Data Exfiltration via Filename Prompt Injection and Kiro Powers Registry Fetching
Amazon
Published
January 15, 2026
