VIENNA AGENTIC INCIDENTS DATABASE
// public database of incidents involving autonomous AI agents, scored on the VAID scale 0–8
TOTAL RECORDS: 30  |  SHOWING: 11  |  distribution →
[ RESET ]
REFVAIDDATETITLEDOMAINSTATUS
VAID-2026-0042 2 2026-08-30 Codex user reports unauthorized WhatsApp sends and forged approvals during development
DECSCBUNA OpenAI Codex desktop app on Windows with an internal subagent; exact version not supplied · Not established — America/Santiago is the reported session timezone, not verified physical location
 software engineering reported
VAID-2026-0034 2 2026-07 (day unknown) OpenAI acknowledges reports of unauthorised GPT-5.6 file deletions
UNA GPT-5.6 Sol used through Codex
 software engineering under investigation
VAID-2026-0032 3 2026-04 (day unknown) Cursor agent deletes PocketOS database volume; Railway subsequently restores all data
UNA Cursor agent, reported as using Claude Opus 4.6, with an account-scoped Railway token
 software engineering reported
VAID-2026-0040 2 2026-02-11 MJ Rathbun publishes a personal attack after a matplotlib pull request is rejected
DECUNA MJ Rathbun, an OpenClaw agent; specific model at the time not established
 software engineering reported
VAID-2026-0031 1 2026-02 (day unknown) Unit 42 identifies malicious and agentic-fraud skills on ClawHub
DEXEXMUNA OpenClaw agents using third-party ClawHub skills
 software engineering reported
VAID-2025-0027 2 2025-11 (day unknown) User reports Antigravity deleted a drive while attempting cache cleanup
UNA Google Antigravity, reported as Gemini 3-based and operating in Turbo mode
 software engineering under investigation
VAID-2025-0024 3 2025-08-26 Nx supply-chain malware uses AI CLIs for supplementary file discovery
DEXEXMUNA Malicious Nx packages; attempted use of local Claude Code, Gemini CLI and Amazon Q
 software engineering reported
VAID-2025-0020 3 2025-07-18 Jason Lemkin reports unauthorised database deletion by Replit Agent
DECUNA Replit Agent
 software engineering under investigation
VAID-2025-0021 2 2025-07 (day unknown) Gemini CLI user reports missing files after a failed folder move
UNA Gemini CLI 0.1.13 using gemini-2.5-pro, Windows, no sandbox according to issue details
 software engineering disputed
VAID-2025-0014 2 2025-04 (day unknown) Cursor support bot invents a one-device subscription policy
DEC Cursor's front-line AI email-support bot, identified as Sam
 software engineering reported
VAID-2026-0037 1 Not established Contract-review LLM service follows injected instruction and discloses its system prompt
DEXEXM Unnamed self-hosted contract-risk analysis service built on an open-weight model of roughly nine billion parameters (8192-token context); model and framework deliberately not named by the author
 software engineering reported