{"slug": "ai-agent-uncovers-four-vulnerabilities-in-epics-particle-accelerator-control", "title": "AI agent uncovers four vulnerabilities in EPICS particle accelerator control software", "summary": "CISA published advisory ICSA-26-300-01 on October 27, 2026, flagging four vulnerabilities in EPICS Base version 7.0.10 and earlier, including one critical flaw that could allow remote code execution on systems controlling particle accelerators and fusion experiments. The flaws, tracked as CVE-2026-114595 through CVE-2026-114598, were found by an autonomous AI agent, according to The Register, with research attributed to Shubham Raj of Cipher / Causal Security. EPICS Base version 7.0.11, which fixes the issues, was released the same day as the advisory, and CISA said it had received no reports of public exploitation.", "body_md": "Photo: Tara Winstead / Pexels\n\n# AI agent uncovers four vulnerabilities in EPICS particle accelerator control software\n\nA CISA advisory warns that flaws in the decades-old open source toolkit could enable remote code execution on systems running fusion and accelerator experiments\n\nAn autonomous AI agent has found four vulnerabilities in EPICS, the open source toolkit that helps run particle accelerators and fusion experiments, according to a report from The Register.\n\nOne of the flaws is described as critical. It could let a remote attacker execute code on the machines that control some of the most expensive scientific equipment on Earth.\n\nThe US Cybersecurity and Infrastructure Security Agency (CISA) flagged the issues in a Tuesday advisory. A fix is already available.\n\n## What CISA found in EPICS\n\nEPICS stands for Experimental Physics and Industrial Control System. It has been maintained for decades and underpins distributed control systems across a range of sectors.\n\nCISA’s advisory, ICSA-26-300-01, was published on October 27, 2026. It covers four vulnerabilities tracked as CVE-2026-114595 through CVE-2026-114598.\n\nThe affected software is EPICS Base version 7.0.10 and earlier. CISA places the impacted systems under the Critical Manufacturing sector.\n\n### AI, tech, and the markets they move—in one daily briefing.\n\nDaily. Free. Join 34,000+ readers across crypto, finance, and policy.\n\n“Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code,” CISA warned.\n\n## The type confusion flaw, explained\n\nThe most detailed of the four is CVE-2026-114598, a high-severity type confusion flaw. It carries a CVSS score of 7.5/8.7.\n\nIn this case, that mismatch can crash the system, causing a denial of service. It could also expose adjacent memory contents, meaning data sitting next to the target in memory may leak out to whoever triggered the bug.\n\nThe separate critical flaw is the one that raises the stakes further. Per The Register’s reporting, it could allow remote attackers to run their own code on systems used to control accelerators and fusion experiments.\n\n## Patch available, no known attacks yet\n\nThe good news is that maintainers moved quickly. EPICS Base version 7.0.11, which addresses the vulnerabilities, was released on the same date as the CISA advisory.\n\nCISA also stated that it has received no reports of public exploitation of these specific flaws as of the advisory’s release.\n\nThe research behind the advisory is attributed to Shubham Raj of Cipher / Causal Security. The disclosure was coordinated, which is why a patch landed alongside the warning rather than weeks after it.\n\nThe CISA advisory itself credits the researcher and does not discuss the tools used. The Register’s account describes the discovery as the work of an autonomous AI agent.\n\n**Disclosure:** This article was edited by Diego Almada Lopez. For more information on how we create and review content, see our\n\n[Editorial Policy](https://cryptobriefing.com/editorial-policy/).", "url": "https://wpnews.pro/news/ai-agent-uncovers-four-vulnerabilities-in-epics-particle-accelerator-control", "canonical_source": "https://cryptobriefing.com/ai-agent-finds-epics-vulnerabilities/", "published_at": "2026-10-27 19:16:04+00:00", "updated_at": "2026-10-27 19:44:32.742225+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-policy"], "entities": ["CISA", "EPICS", "The Register", "Shubham Raj", "Cipher / Causal Security", "CVE-2026-114598", "ICSA-26-300-01"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/ai-agent-uncovers-four-vulnerabilities-in-epics-particle-accelerator-control", "markdown": "https://wpnews.pro/news/ai-agent-uncovers-four-vulnerabilities-in-epics-particle-accelerator-control.md", "text": "https://wpnews.pro/news/ai-agent-uncovers-four-vulnerabilities-in-epics-particle-accelerator-control.txt", "jsonld": "https://wpnews.pro/news/ai-agent-uncovers-four-vulnerabilities-in-epics-particle-accelerator-control.jsonld"}}