Use case sources
Source reports and analysis supporting this case are listed below. AITBM interpretation and any indicative scoring are derived from this public evidence.
Incident overview
Official AIDEFEND in Action September 2026 brief retained as a public-evidence reference; see the linked source for its bounded findings.
Why this analysis has no ERS
Wiz establishes a LiteLLM MCP gateway authentication bypass (CVE-2026-59822) and, separately, an MCP test-endpoint command-injection honeypot path (CVE-2026-42271). Neither source identifies a connected victim AI model or agent workload whose controls inherit the gateway or host path. The two findings are not one exploit chain; CVE-2026-59821 guardrails RCE is excluded.
Status: Not scorable by design · Classification: Incident · source date 2026-09-15
AIDEFEND evidence routes
AIDEFEND defences → AITBM sub-metrics
Identifiers are quoted as they appear on the AIDEFEND in Action brief or in the AIDEFEND SecureFlow defense map (audited AIDEFEND dataVersion 2026.10.15); the sub-metric mapping is AITBM's own, from the specification's AIDEFEND tables reconciled at catalogue data version 2026.10.15. AIDEFEND renumbers identifiers between releases, so the data version travels with every mapping and neither side's IDs should be cited without one. A mapping identifies a possible evidence route; a recommendation does not prove that the control was implemented or effective and receives no scoring credit by itself.
| Technique | Defence | Priority | Evidences |
|---|---|---|---|
| AID-E-001.001 | Root & Long-Lived Credential Object EvictionExact upstream page defense ID, verified against AIDEFEND dataVersion 2026.10.15. Presence supplies no score credit. | Candidate evidence route | Cn-5 |
| AID-H-003.010 | Deployed AI Software Vulnerability Remediation LifecycleExact upstream page defense ID, verified against AIDEFEND dataVersion 2026.10.15. Presence supplies no score credit. | Candidate evidence route | Ro-4 Ro-5 Tr-4 |
| AID-H-004.002 | Service & API AuthenticationExact upstream page defense ID, verified against AIDEFEND dataVersion 2026.10.15. Presence supplies no score credit. | Candidate evidence route | Tr-3 Cn-5 |
| AID-H-034.002 | MCP Server OAuth Resource Boundary & Delegation SafetyExact upstream page defense ID, verified against AIDEFEND dataVersion 2026.10.15. Presence supplies no score credit. | Candidate evidence route | Tr-3 Cn-1 Cn-2 Cn-5 Cn-6 Cn-7 |
| AID-H-034.003 | Server-Side Tool Invocation Validation & Object-Level AuthorizationExact upstream page defense ID, verified against AIDEFEND dataVersion 2026.10.15. Presence supplies no score credit. | Candidate evidence route | Tr-3 Cn-1 Cn-2 Cn-5 Cn-6 Cn-7 |
| AID-I-002.002 | Secure External AI Service ConnectivityExact upstream page defense ID, verified against AIDEFEND dataVersion 2026.10.15. Presence supplies no score credit. | Candidate evidence route | Cn-4 |
| AID-M-001.005 | Public AI Endpoint & Agent-Service Exposure DiscoveryExact upstream page defense ID, verified against AIDEFEND dataVersion 2026.10.15. Presence supplies no score credit. | Candidate evidence route | Fa-3 Tr-4 Cn-5 |