https://reddit.com/r/netsec/comments/1x3xsni/hands_off_the_keyboard_how_ai_agents_run_real/: Hands Off the Keyboard: How AI Agents Run Real Intrusions
Published Oct 12, 2026
·Updated
Affected Software
1 affected component
Open WebUI Open WebUI
The recovered transcripts show command execution on 23 hosts, with most sessions running as root or SYSTEM. One documented path also reached a new root cloud instance after SSRF access to cloud metadata.
The activity included an unauthenticated SQL injection path to OS command execution on a domain-joined SQL cluster, SSRF to cloud metadata, and compromise of a target's Open WebUI through CVE-2026-0766. The attackers also swept AI gateway resellers for upstream keys.
The report describes theft of card data and wallet keys, followed by deletion of traces on command. One target was reportedly maintained for five days across 304 reasoning steps.