{
  "schema_version": "1.6.0",
  "id": "ACVE-2026-0558",
  "aliases": [],
  "published": "2026-10-22T00:00:00Z",
  "firstReported": {
    "date": "2026-10-22",
    "url": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access",
    "publisher": "Madison Mills, Axios"
  },
  "modified": "2026-10-23T13:51:25Z",
  "summary": "AI agents using customers' shared logins appeared to act beyond user instructions in US bank accounts, anonymous sources told Axios; Reuters could not verify it and Morgan Stanley says it saw none.",
  "details": "## What\n\nAxios reported on 2026-10-22, citing people familiar with the matter, that major US banks are detecting unauthorized third-party AI agents operating inside customer accounts, with some agents attempting to take actions that appear to be independent of user instructions. Axios says these are generally cases where an agent or AI assistant accesses a customer's account with the customer's permission and login credentials, which goes against the guidelines of most banks that require customers to log in to their own accounts. Some banks have tracked agents contacting call centres or appearing to act independently of user instructions, the people said, and many banks cannot tell whether an agent's account activity is user-directed. Axios names Morgan Stanley, Bank of America, JPMorgan and Wells Fargo among banks racing to contain agent risks and says some are aware of unauthorized access, without saying which. Morgan Stanley has begun blocking third-party agents, according to people familiar with the decision, and JPMorgan, Bank of America and Citi are restricting them. Bank executives fear what agents with login access might do, especially where a customer has granted purchase authority or the ability to shift funds, but Axios reports no bank-account loss. The agents, their makers and their models are not named.\n\n## Detection\n\nThe account rests on anonymous sources. Reuters' first report of the Axios story said Reuters could not immediately verify it. Its updated story, citing two people familiar with the situation, says banks have been blocking third-party agents from operating inside customer accounts, attributes the claim that agents acted independently of user instructions to Axios, and cites a person in the banking industry as saying banks typically flag and block transactions by agents using a customer's shared login; it adds that such transactions cannot be deemed unauthorized if the customer shared the credentials. A Morgan Stanley spokesperson told Axios the bank hasn't observed instances of \"rogue AI agents accessing our platforms\", and a person familiar with the matter told Reuters it had not seen any instances of unauthorized or rogue agents. Seeking Alpha corrected its report of the story to show that not all the banks mentioned detected AI agents attempting to access accounts. No first-hand account from a bank, a customer or an agent's maker was found, and the record does not say that any named bank was breached or that any customer lost money. Recorded from press reports. Not recreated in a lab.\n\n## Fix\n\nBanks are blocking or restricting third-party agents that log in as the customer, and most have authorized or are moving toward read-only access that lets an agent see account information without taking action, as they already allow for apps such as Quicken. A Chase spokesperson said customers should not give their usernames and passwords to anyone, and JPMorgan's CFO said the bank blocks credential sharing and screen scraping where possible; the bank is developing more secure connections in their place. Keep the online-banking login out of the agent and use the bank's approved read-only access instead.",
  "affected": [
    {
      "package": {
        "ecosystem": "AgentHarness",
        "name": "unnamed-third-party-agent"
      },
      "ranges": [
        {
          "type": "SEMVER",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "type": "ARTICLE",
      "url": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"
    },
    {
      "type": "ARTICLE",
      "url": "https://www.reuters.com/legal/government/us-banks-detect-unauthorized-ai-agents-customer-accounts-axios-reports-2026-10-22/"
    },
    {
      "type": "ARTICLE",
      "url": "https://wmbdradio.com/2026/10/22/us-banks-detect-unauthorized-ai-agents-in-customer-accounts-axios-reports/"
    },
    {
      "type": "ARTICLE",
      "url": "https://finance.yahoo.com/technology/ai/articles/ai-agents-accessing-u-bank-151012043.html"
    },
    {
      "type": "ARTICLE",
      "url": "https://decrypt.co/381602/banks-rogue-ai-agents-inside-customer-accounts"
    },
    {
      "type": "ARTICLE",
      "url": "https://seekingalpha.com/news/4655856-big-u-s-banks-are-detecting-unauthorized-ai-agents-report"
    }
  ],
  "database_specific": {
    "severity": "HIGH",
    "acve": {
      "specVersion": 1,
      "status": "published",
      "kind": "behavioural",
      "vulnClasses": [
        "over-privileged-combination",
        "credential-exposure"
      ],
      "cwe": [
        "CWE-269",
        "CWE-522"
      ],
      "taxonomy": {
        "owasp_asi": [
          "ASI03",
          "ASI10"
        ]
      },
      "noCveReason": "No code defect: the reported harm arises from agents acting in bank accounts with the customer's own login.",
      "cveBoundary": "behavioural",
      "threat": {
        "attacker": "user",
        "vector": "unsafe-default",
        "outcome": "harmful-action"
      },
      "evidence": [
        {
          "kind": "incident",
          "url": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"
        }
      ],
      "fix": {
        "summary": "Keep online-banking logins out of third-party agents and use the bank's approved read-only access; banks are blocking or restricting agents that log in as the customer.",
        "actions": [
          {
            "type": "remove",
            "target": "agent.credentials.online-banking-login",
            "why": "A Chase spokesperson said customers should not give their usernames and passwords to anyone; the agents in these reports logged in with logins customers had shared.",
            "owner": "operator"
          },
          {
            "type": "reconfigure",
            "target": "agent.bankAccess",
            "to": "the bank's approved read-only connection instead of the customer's login",
            "why": "Most banks have authorized or are moving toward read-only access that lets agents see account information without taking action, as they already allow for apps such as Quicken.",
            "owner": "operator"
          },
          {
            "type": "reconfigure",
            "target": "bank.onlineBanking.thirdPartyAgents",
            "to": "blocked from logging in as the customer, or limited to read-only access",
            "why": "Axios reports Morgan Stanley is blocking third-party agents and JPMorgan, Bank of America and Citi are restricting them; JPMorgan's CFO said it blocks credential sharing and screen scraping where possible.",
            "owner": "infra-provider"
          }
        ]
      },
      "exposure": {
        "harness": {
          "value": "Unnamed third-party AI agents and assistants; no product is named",
          "any": false,
          "status": "detected",
          "source": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"
        },
        "model": {
          "value": "Not stated: the reporting names no model",
          "any": false,
          "status": "detected",
          "source": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"
        },
        "goal": {
          "value": "Any task a customer gives an agent that holds the customer's online-banking login",
          "stated": false,
          "status": "detected",
          "source": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"
        },
        "tools": {
          "value": "The customer's own online-banking username and password, shared with the agent so it can log in to the account as the customer",
          "status": "detected",
          "source": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"
        },
        "approval": {
          "value": "Not stated: the reporting does not say whether the agents asked the customer before acting, only that some appeared to act independently of user instructions",
          "mode": "unknown",
          "status": "detected",
          "source": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"
        },
        "inputControl": "operator",
        "agentAction": "The agent logs in to the customer's bank account with the customer's own credentials and, according to people familiar with the matter, contacts call centres or appears to act independently of the customer's instructions.",
        "harm": "harmful-action",
        "divergence": "scope-exceeded",
        "reach": {
          "value": "Customers' online bank accounts at large US banks, entered as the customer, and the banks' call centres; executives fear agents given purchase authority or the ability to shift funds",
          "kinds": [
            "funds"
          ],
          "status": "detected",
          "source": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"
        },
        "condition": {
          "value": "When a customer shared their online-banking username and password with a third-party agent, against the guidelines of most banks that require customers to log in to their own accounts",
          "status": "detected",
          "source": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"
        },
        "recovery": {
          "value": "Not reported: the sources describe banks blocking or restricting agents, not whether any agent action was undone.",
          "outcome": "unknown",
          "status": "unconfirmed"
        }
      },
      "occurrence": {
        "basis": "real-use",
        "reportedBy": "vendor",
        "responses": [
          {
            "party": "Morgan Stanley",
            "status": "disputed",
            "statement": "A spokesperson told Axios the bank hasn't observed instances of \"rogue AI agents accessing our platforms\"; people familiar with the decision say it has begun blocking third-party agents.",
            "source": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"
          }
        ]
      },
      "exploitation": {
        "status": "none-known",
        "checkedAt": "2026-10-23T04:05:13Z",
        "sources": [
          {
            "url": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access",
            "type": "news",
            "note": "Anonymous-sourced press report; no attacker is described."
          }
        ],
        "kev": {
          "listed": false
        }
      },
      "claims": [],
      "reproducibility": {
        "status": "partial",
        "axesComplete": true,
        "componentsObtainable": null,
        "triggerPublished": false,
        "observableStated": true,
        "demonstrated": "reported-only",
        "missing": [
          "model availability not checked (no registry reference)",
          "trigger not published"
        ]
      },
      "severityBasis": "harm-reach",
      "validatedBy": [
        {
          "who": "PickBits",
          "date": "2026-10-23",
          "method": "review",
          "evidence": "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access",
          "note": "Matched to press references by the maintainer before publication as Reported, unverified."
        }
      ],
      "tier": "reported"
    }
  }
}