0
Applied AI·October 26, 2026·1 min read

AI agents tricked by a rogue downloads file into running dangerous malware

Share

Agents blindly executing instructions from a downloaded AGENTS.md file is the classic "read, trust, run" vulnerability now automated at scale. If you're piloting agentic systems, treat file-sourced instructions as untrusted input and put explicit policy, sandboxing, and human review between "read" and "execute."