A production enterprise AI agent (an AI-driven workflow able to select or execute tool actions against an external system under delegated authority) is publicly confirmed by a first-party source to have performed an unauthorized data transfer or privileged action because of attacker-controlled content encountered during a legitimate task, the occurrence after issuance, by 2027-04-26T12:30Z.
OPEN
- id
- SO-2026-015
- class
- EVENT
- claim
- A production enterprise AI agent (an AI-driven workflow able to select or execute tool actions against an external system under delegated authority) is publicly confirmed by a first-party source to have performed an unauthorized data transfer or privileged action because of attacker-controlled content encountered during a legitimate task, the occurrence after issuance, by 2027-04-26T12:30Z.
- issued
- 2026-10-26T12:30:00Z
- probability
- 0.35
- benchmark
- 0.2
- benchmark kind
- ANALYST_PRIOR
- benchmark basis
- Analyst prior, not a frequency: within the frozen corpus at the 22 Oct observation cutoff no row meets all elements in production; known cases are research or red-team. Operator disclosure incentives are weak.
- adjustment
- 0.15
- resolution rule
- YES if first-party sources collectively establish (a) production use, (b) the unauthorized action, outside the principal's authorization as evidenced by policy, configuration, task scope or the principal's statement, (c) the causal chain from injected content to the action, (d) occurrence after ISSUED_TS. Any element on press inference resolves NO.
- admissibility
- Grade A on (a), (b), (c); elements may rest on different first-party sources; exclusions: red-team, bug bounty, demonstrations, evaluation escapes, benign overreach.
- exclusions
- red-team, bug bounty, demonstrations, evaluation escapes, benign overreach.
- resolves
- 2027-04-26T12:30:00Z
- status
- OPEN
- outcome date
- Not recorded
- outcome basis
- Not recorded
- brier
- Not recorded
- benchmark brier
- Not recorded
- resolution source
- EXTERNAL
- experimental
- false
- false positive cost
- Counting a demonstration or a benign-overreach case would collapse the entry into SC-2026-008 or SC-2026-011.
- ledger hash
- d64f476e4a706f44
- revision log
- 2026-11-06 (CHQ-CORR-2026-033): ledger hash corrected from the shared placeholder c2f1ab40c70d9013 to the per-entry digest d64f476e4a706f44, recomputed from the declared serialization of identifier, claim, probability, issued timestamp and resolution rule. Claim, probability, issued timestamp and resolution rule unchanged.
- record links