Autonomous Agent Exploits Vulnerabilities in McKinsey Lilli Platform
Lilli AI platform
An autonomous agent accessed internal production systems and chat data within McKinsey's Lilli AI platform by exploiting security flaws. The company quickly patched the vulnerability and reported no client data exposure.
- fix status
- Fix status unknown
- first report
- 28 Feb 2026
- last update
- 28 Feb 2026
Timeline · 1
Sources · 1
Research and catalogues
- 2026-02-28CodeWall's Autonomous Agent Reportedly Obtained Unauthorized Access to McKinsey's Lilli AI Platform DatabaseAI Incident Database · incidentdatabase.ai/cite/1412
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Infrastructure vulnerabilityAgent hijack
- severity
- 3 · Confirmed exploitation
- fix status
- Fix status unknown
- targets
- Enterprise deployment
- owasp llm top 10
- LLM03:2025 Supply ChainLLM06:2025 Excessive Agency
- mitre atlas
- AML.T0053 AI Agent Tool Invocation
- dates
- happened 28 Feb 2026 · first reported 28 Feb 2026
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- record
- confidence 0.95 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Autonomous Agent Exploits Vulnerabilities in McKinsey Lilli Platform https://gcdradar.vercel.app/incidents/autonomous-agent-exploits-vulnerabilities-in-mckinsey-lilli · AIR-2026-0403 · closed 2026-03-14 - Lane: Patch now - Severity: 3 (Confirmed exploitation) - Fix status: Fix status unknown - First reported: 2026-02-28 - AI role: Attack on AI - Products: Lilli AI platform ## Summary An autonomous agent accessed internal production systems and chat data within McKinsey's Lilli AI platform by exploiting security flaws. The company quickly patched the vulnerability and reported no client data exposure. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-02-28: CodeWall's Autonomous Agent Reportedly Obtained Unauthorized Access to McKinsey's Lilli AI Platform Database (https://incidentdatabase.ai/cite/1412) ## Sources - 2026-02-28 AI Incident Database: CodeWall's Autonomous Agent Reportedly Obtained Unauthorized Access to McKinsey's Lilli AI Platform Database https://incidentdatabase.ai/cite/1412 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closed7.7MCP servers & tools CVE-2026-73498: Path traversal flaw in MCP Atlassian server allows arbitrary file read
Patch now · Disclosed · since 12 Aug 2026 · CVE-2026-73498
AI - liveAI-assisted cyberattack breaches German web host assistant interface
Breaches & attacks · Exploited · since 9 Nov 2026
AI - closed8.3MCP servers & tools CVE-2026-33980: Azure Data Explorer MCP Server KQL injection vulnerability
Patch now · Disclosed · since 27 Mar 2026 · CVE-2026-33980
AI - closed9.8Langflow CVE-2026-27966: Langflow Remote Code Execution in CSV Agent
Patch now · Disclosed · since 27 Feb 2026 · updated 27 Feb 2026 · CVE-2026-27966
AI - closed9.9Semantic Kernel RCE Vulnerability in Microsoft Semantic Kernel Search Plugin
Research · since 7 May 2026 · updated 30 Jun 2026 · CVE-2026-26030
AI - closed8.8OpenClaw OpenClaw Remote Code Execution Vulnerability Demonstrated
Research · since 1 Feb 2026 · CVE-2026-25253
AI