# agent-data-injection-tricks-ai-agents-into-misreading-tool-data: Agent Data Injection Tricks AI Agents into Misreading Tool Data

> Agent Data Injection Tricks AI Agents into Misreading Tool Data is a medium-severity prompt injection issue in Agent Data Injection Tricks AI Agents into Misreading Tool D, an AI agent.

- **Canonical URL:** https://catalog.anomity.ai/vuln/agent-data-injection-tricks-ai-agents-into-misreading-tool-data
- **Aliases:** ti-053
- **Severity:** medium
- **Attack type:** Prompt injection
- **Component:** Agent Data Injection Tricks AI Agents into Misreading Tool D (AI agent)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-07-16
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/agent-data-injection-tricks-ai-agents-into-misreading-tool-data

## Summary

Researchers disclosed Agent Data Injection (ADI), which corrupts the factual data agents trust (sender names, button IDs, tool results) using punctuation-like characters that models misread as real structural markers. In tests it pushed coding assistants into running attacker commands and forged pull-request approval records without hijacking the core task, so any agent that ingests untrusted tool output is exposed.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| see advisory | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if Agent Data Injection Tricks AI Agents into Misreading Tool D is installed or configured on a machine. Check the references for the exact versions.

## How do I fix it?

Add unguessable random tags to agent-facing field names and treat all tool-output data as untrusted rather than structural.

## How do I find every machine running Agent Data Injection Tricks AI Agents into Misreading Tool D?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Agent Data Injection Tricks AI Agents into Misreading Tool D and which version, then enforce a policy on it.

## References

- article: https://thehackernews.com/2026/07/new-agent-data-injection-attack-can.html

## Related vulnerabilities

- [CVE-2026-96893](https://catalog.anomity.ai/vuln/cve-2026-96893) — high
- [cryptographic-context-injection-an-encrypted-web-page-got-github](https://catalog.anomity.ai/vuln/cryptographic-context-injection-an-encrypted-web-page-got-github) — medium
- [manus-one-email-with-a-jsfuck-payload-or-one-shared-project-instruction](https://catalog.anomity.ai/vuln/manus-one-email-with-a-jsfuck-payload-or-one-shared-project-instruction) — high
- [salesbleed-zero-click-data-exfiltration-from-salesforce-agentforce-via](https://catalog.anomity.ai/vuln/salesbleed-zero-click-data-exfiltration-from-salesforce-agentforce-via) — high
- [CVE-2026-24301](https://catalog.anomity.ai/vuln/cve-2026-24301) — high
- [ghostjacking-a-firewall-block-log-is-an-injection-channel-because-the](https://catalog.anomity.ai/vuln/ghostjacking-a-firewall-block-log-is-an-injection-channel-because-the) — high

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=agent-data-injection-tricks-ai-agents-into-misreading-tool-data