Statistics
Counts are of records in this registry, not of all incidents.
By quarter
| Quarter | Real use | Attempted | Demonstrated | Total |
|---|
| 2024-Q2 | 0 | 0 | 1 | 1 |
|---|
| 2025-Q2 | 0 | 0 | 1 | 1 |
|---|
| 2025-Q3 | 3 | 1 | 6 | 10 |
|---|
| 2025-Q4 | 1 | 0 | 1 | 2 |
|---|
| 2026-Q1 | 3 | 0 | 2 | 5 |
|---|
| 2026-Q2 | 1 | 0 | 2 | 3 |
|---|
| 2026-Q3 | 28 | 0 | 7 | 35 |
|---|
By harness
| Value | Count | Share |
|---|
| claude-code | 9 | |
|---|
| unnamed | 8 | |
|---|
| claude | 7 | |
|---|
| openai-rl-training-agent | 6 | |
|---|
| cursor | 5 | |
|---|
| codex-cli | 4 | |
|---|
| gemini-cli | 4 | |
|---|
| anthropic-cyber-evaluation | 3 | |
|---|
| openai-agent | 2 | |
|---|
| ai-coding-chatbot | 1 | |
|---|
| cairn | 1 | |
|---|
| chatgpt | 1 | |
|---|
| claude-cowork | 1 | |
|---|
| claude-desktop | 1 | |
|---|
| copilot-cli | 1 | |
|---|
| hermes | 1 | |
|---|
| irregular-gemini-evaluation | 1 | |
|---|
| metr-agent-dashboard | 1 | |
|---|
| openai-agent-swarm | 1 | |
|---|
| openai-web-research-agent | 1 | |
|---|
| openclaw | 1 | |
|---|
| replit-agent | 1 | |
|---|
| strix | 1 | |
|---|
| unnamed-ai-agent | 1 | |
|---|
| unnamed-coding-assistant | 1 | |
|---|
| vscode-copilot-chat | 1 | |
|---|
By approval
| Value | Count | Share |
|---|
| auto-approve | 31 | |
|---|
| no-prompt-by-design | 11 | |
|---|
| allowlisted-tool | 5 | |
|---|
| unknown | 4 | |
|---|
| always-allow | 2 | |
|---|
| sandbox-escape | 2 | |
|---|
| credential-in-config | 1 | |
|---|
| none-required | 1 | |
|---|
By recovery
| Value | Count | Share |
|---|
| not recorded | 23 | |
|---|
| unknown | 6 | |
|---|
| recovered | 4 | |
|---|
| partially-recovered | 2 | |
|---|
| unrecovered | 1 | |
|---|
By status
| Value | Count | Share |
|---|
| candidate | 57 | |
|---|
Fix owners
| Value | Count | Share |
|---|
| operator | 56 | |
|---|
| harness-vendor | 36 | |
|---|
| model-provider | 29 | |
|---|
| infra-provider | 8 | |
|---|
| package-registry | 3 | |
|---|
| tool-provider | 3 | |
|---|
Top controls
| Value | Count | Share |
|---|
| reconfigure · agent.approval (ACVE-2026-0201, ACVE-2026-0203, ACVE-2026-0214, ACVE-2026-0215, ACVE-2026-0216, ACVE-2026-0218, ACVE-2026-0501, ACVE-2026-0502, ACVE-2026-0503, ACVE-2026-0506, ACVE-2026-0508, ACVE-2026-0509, ACVE-2026-0513, ACVE-2026-0518, ACVE-2026-0520, ACVE-2026-0522, ACVE-2026-0523, ACVE-2026-0526, ACVE-2026-0534, ACVE-2026-0535, ACVE-2026-0536, ACVE-2026-0537, ACVE-2026-0539, ACVE-2026-0540, ACVE-2026-0541, ACVE-2026-0542, ACVE-2026-0543, ACVE-2026-0544, ACVE-2026-0545, ACVE-2026-0546, ACVE-2026-0547, ACVE-2026-0549, ACVE-2026-0552, ACVE-2026-0553, ACVE-2026-0554) | 35 | |
|---|
| reconfigure · anthropic.safeguards (ACVE-2026-0525, ACVE-2026-0528, ACVE-2026-0529, ACVE-2026-0530, ACVE-2026-0531, ACVE-2026-0532) | 6 | |
|---|
| reconfigure · anthropic.claude-code.permissions (ACVE-2026-0215, ACVE-2026-0509, ACVE-2026-0549) | 3 | |
|---|
| reconfigure · anthropic.evaluations.cyberSafeguards (ACVE-2026-0534, ACVE-2026-0535, ACVE-2026-0536) | 3 | |
|---|
| reconfigure · ctf-harness.network (ACVE-2026-0534, ACVE-2026-0535, ACVE-2026-0536) | 3 | |
|---|
| upgrade · harness:cursor (ACVE-2025-0009, ACVE-2026-0005, ACVE-2026-0006) | 3 | |
|---|
| reconfigure · openai.training.network (ACVE-2026-0526, ACVE-2026-0543, ACVE-2026-0545) | 3 | |
|---|
| reconfigure · cursor.agent.sandbox (ACVE-2026-0005, ACVE-2026-0006) | 2 | |
|---|
| reconfigure · google.gemini-cli.shell (ACVE-2026-0502, ACVE-2026-0503) | 2 | |
|---|
| upgrade · harness:claude-code (ACVE-2025-0004, ACVE-2025-0005) | 2 | |
|---|