Corelight Warns AI Agents Can Silently Run Unreviewed Code With Privileged Access to Enterprise Networks

AI coding assistants can run MCP servers whose dependencies change without any configuration edit, and those servers often hold administrator credentials. The finding comes from a lab investigation that began as a blast-radius analysis using an AI agent. The agent noticed other AI agents on an administrator’s workstation. Nothing there was compromised, but the setup […]

Read the original article:

Corelight Warns AI Agents Can Silently Run Unreviewed Code With Privileged Access to Enterprise Networks