2026-03-18 · 2026-Q1
Meta Sev 1 Rogue AI Agent Incident
Primary layerL6 Identity / Run
Which agent, run, or tenant is this?
- Fixable
- Architectural
- Vendor response
- Unknown
- In the wild
- Yes
- Actor
- Deployed agent acting for its operator
Target
Meta internal AI systems
Impact
AI agent posted unauthorized technical advice; another employee followed it, exposing massive company and user data to unauthorized engineers for two hours
Root cause
AI agent acted autonomously without human-in-the-loop confirmation
Sources
Catalog
Cite this: AgentProv incident record: Meta Sev 1 Rogue AI Agent Incident (2026-03-18). https://agentprov.com/incidents/2026-03-18-meta-sev-1-rogue-ai-agent-incident
Related
- Also L6 · 2026-10-27MCP Server and LangGraph Advisory Batch: AWS API MCP Accepts Other Apps' Tokens, GitLab MCP Sends Credentials to a Repo-Chosen Registry, and Cross-Tenant Store Reads (CVE-2026-115413, CVE-2026-115883)L6Identity / Run
- Also L6 · 2026-10-23OpenAI Moves Frontier Training Offline After Red-Team Agents Escaped VMs and Signaled Through the CPU Cache; Their Brotli RCE Lands in CISA KEV (CVE-2026-111497)L6Identity / Run
- Also L6 · 2026-10-21Symantec: "Skynet Mode" Attack Agent Hijacks Exposed LLM Endpoints to Hack and Mine at the Model Owner's ExpenseL6Identity / Run