CVE-2026-61500: Anthropic Mythos Finds Rejetto HFS Flaw, Exploited Within One Day
2026-10-05
Tech Times
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Anthropic's Mythos AI identified a critical vulnerability (CVE-2026-61500) in Rejetto HTTP File Server, enabling attackers to forge admin sessions and execute remote code. The flaw was exploited within a day of disclosure, leading to unauthorized access and harm to servers in the US and Japan.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves an AI system (Anthropic's Mythos) used in vulnerability research that directly led to the discovery of a critical security flaw. The flaw was exploited in the wild within a day, causing unauthorized access and potential harm to affected servers. The AI's role was pivotal in identifying the vulnerability and enabling the exploit development. The harm includes unauthorized system access and potential property damage, fitting the definition of an AI Incident. The rapid exploitation also highlights a structural problem in cybersecurity timelines due to AI acceleration, but the realized harm from active attacks confirms this as an AI Incident rather than a hazard or complementary information.[AI generated]