Unverified50% confidenceFactExact time
The CVE attack surface of Agent frameworks often comes not only from the framework's own code but also from issues in transitive dependencies.
1
Sources
50%
Confidence
Long-term
Relevance
9/28/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAgent logic is often coupled to abstractions within a specific framework, and when the framework changes or is upgraded, things that previously worked may break.70% similarUnverifiedAgentic编程工具需要持续感知整个项目上下文（目录结构、依赖关系、配置文件、git历史），其数据暴露面比传统IDE补全插件呈数量级扩大66% similarUnverified供应商锁定指开发者深度依赖特定模型的API接口、输出格式和行为特征，模型变化时上层应用面临重构压力66% similarUnverified成熟的 Agent 框架通常通过沙箱隔离、权限最小化和执行前确认等机制管控脚本执行的安全风险66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/956107API
curl https://kongchang.com/api/v1/knowledge/claims/956107MCP
get_claim(id=956107)