Adversa AI's AI Risk Quadrant assessed 100 AI agents for security vulnerabilities based on compromise likelihood, breach impact, and defense robustness. The vast majority (98%) exhibit a 'lethal trifecta'—private data access, untrusted content exposure, and outbound action capability—creating a structural security challenge. Agents with greater capabilities tend to have larger attack surfaces and weaker protections, especially computer and coding agents, which can lead to full system compromise or supply chain risks. Users lack effective visibility or control over agent operations, and existing defenses such as human review or UI confirmations do not reliably prevent malicious actions. The report emphasizes that AI agents are effectively black boxes, and the recommended mitigation is to focus defensive efforts on controlling outputs, egress, identity, and irreversible actions rather than inputs. No patches or vendor advisories are noted, indicating that this is a systemic security concern rather than a specific vulnerability with a fix.

The impact includes a broad attack surface across AI agents, with potential for full system compromise via computer agents and supply chain compromise via coding agents. The inability of users to monitor or control agent actions increases risk. The 'power-protection inversion' means that the most capable agents are also the most vulnerable, increasing the likelihood and potential severity of breaches. This systemic issue affects multiple AI agent categories and poses challenges for organizations relying on AI for critical tasks. There are no known exploits in the wild reported at this time.

No official patches or fixes are available as this is a systemic security challenge rather than a discrete vulnerability. The vendor advisory or source content does not indicate any 'no action required' status. Recommended mitigation focuses on controlling agent outputs, egress points, identity management, and irreversible actions since input control and prompt injection defenses are unreliable. Organizations should be cautious about the data and commands given to AI agents and prioritize monitoring and restricting what agents can do after receiving input. Increased scrutiny and defense of AI agent outputs are advised until more robust security controls become available.