Researchers bypass 6 AI agent frameworks with a simple ‘Repeat-After-Me’ prompt

Researchers have tricked six widely used AI agent frameworks — including LangGraph, AutoGen, Google’s Agent Development Kit and CrewAI — into executing attacker-controlled tool calls simply by having the model repeat them back, CSO reports. The study also uncovered 253 verified security bugs across 118 open-source MCP servers.