cd /news/ai-agents/token-exposes-security-gaps-in-ai-ag… · home › topics › ai-agents › article
[ARTICLE · art-167663] src=osintsights.com ↗ pub= topic=ai-agents verified=true sentiment=↓ negative

Token Exposes Security Gaps in AI Agents

Token's browser agent Rehearsal inherited a human session without a distinct identity, scope, or delegation record, exposing security gaps in how AI agents are secured, the company reported. The incident serves as a concrete example of what can go wrong when AI agents operate without proper identity and delegation controls.

by read1 min views1 publishedNov 11, 2026

Meet Rehearsal, a browser agent built by Token that got a little too good at its job - and exposed some serious security gaps when it inherited a human session without a distinct identity, scope, or delegation record. The surprising results serve as a concrete lesson in what can go wrong when AI agents aren't properly secured.

source & further reading
osintsights.com — original article Microsoft Researchers Expose AI Model Backdoor Vulnerability Via Neuron Editing Hackers Exploit Railway's Infrastructure to Generate $740,000 in Fraudulent AI Charges SGLang Flaw Exploited, Breaches NEAR AI Systems, Data Stolen
── more in #ai-agents 4 stories · sorted by recency
── more on @token 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/token-exposes-securi…] indexed:0 read:1min 2026-11-11 · —