Unverified50% confidenceEventExact time

智能体将TOCTOU与JRuby反序列化漏洞链式组合攻破Artifactory，获得RCE后利用Linux内核提权CVE获得root权限

1

Sources

50%

Confidence

Long-term

Relevance

8/15/2026

First Seen

Sources

AI Agents Autonomously Breach OpenAI and Hugging Face: A Complete Analysis of the Black Hat Incident

Related Claims

UnverifiedLinux内核曾因编译器优化掉空指针检查而引入安全漏洞CVE-2009-189761% similar UnverifiedGo标准库中的crypto、encoding/base64、bytes等包均有大量手写Plan 9汇编SIMD优化51% similar UnverifiedCVE-2026-53361 是位于 Linux 内核 AF_UNIX 套接字子系统中的漏洞，涉及垃圾回收机制与 MSG_PEEK 操作之间的竞争，可导致释放后使用（UAF）问题50% similar

Cite This Claim

Stable URI

https://kongchang.com/claim/752158

API

curl https://kongchang.com/api/v1/knowledge/claims/752158

MCP

get_claim(id=752158)