<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Cve on Security Unlocked</title><link>https://securityunlocked.com/tags/cve/</link><description>Recent content in Cve on Security Unlocked</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Tue, 28 Apr 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://securityunlocked.com/tags/cve/index.xml" rel="self" type="application/rss+xml"/><item><title>Agentic Trust Debt: How 'Agent-Controlled Input' Became the New Buffer Overflow</title><link>https://securityunlocked.com/articles/agentic-trust-debt-how-agent-controlled-input-became-the-new-buffer-overflow/</link><pubDate>Tue, 28 Apr 2026 00:00:00 +0000</pubDate><guid>https://securityunlocked.com/articles/agentic-trust-debt-how-agent-controlled-input-became-the-new-buffer-overflow/</guid><description>Five AI agent frameworks disclosed the same vulnerability class in a single week, and the MCP SDK STDIO injection extended the pattern across four language ecosystems. The cluster reads like the buffer overflow era: a field-level conceptual gap in how agentic systems handle trust, not a string of individual implementation bugs.</description></item></channel></rss>