Unverified50% confidenceFactExact time
Attackers can use scripts to send requests to open endpoints at extremely high frequency, causing a "Denial of Wallet" attack—not disrupting service availability, but exhausting API quota and account balance.
1
Sources
50%
Confidence
Long-term
Relevance
10/15/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedAttackers can induce agents to execute a sequence of seemingly normal operations—such as querying user data, calling formatting tools, and triggering email sending—to form a data exfiltration chain.73% similarUnverified提示注入在Agent系统中尤为危险，因为被攻陷的Agent可能拥有发送邮件、删除文件、调用支付API等真实世界权限72% similarUnverified攻击者可以通过供应商的管理后台、不安全的API接口或弱口令获得访问权限，批量控制门店的制冷设备，形成'单点突破、多点瘫痪'的攻击模式。71% similarUnverifiedThe core logic of prompt injection attacks is that the attacker does not need to breach permission boundaries — they only need to embed instructions in files, web pages, or emails read by the agent to hijack its behavior.71% similarUnverifiedAn attacker only needs to send a curl request to a webhook endpoint with a signature verification vulnerability, declaring a checkout.session.completed event and an arbitrary user ID, to upgrade themselves to a paid plan without a credit card or a Stripe account.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1034864API
curl https://kongchang.com/api/v1/knowledge/claims/1034864MCP
get_claim(id=1034864)