AI agent Cipher finds one critical and three high-severity bugs in EPICS industrial control software
See how this story connectsAn autonomous AI agent called Cipher, developed by Causal Security, found four previously unknown vulnerabilities in EPICS Base, open source software used in around 90 major scientific, university and industrial projects and facilities, including particle accelerator and fusion reactor control systems. The flaws include a critical 9.8-rated integer overflow (CVE-2026-114595) that could lead to remote code execution, and three high-severity flaws rated 8.2, 7.5 and 7.5. Causal Security co-founder Shubham Raj said the agent investigated, tested and validated the exploits in three hours and 49 minutes, with one human instruction authorising deeper exploitability testing.
Why it matters
Organisations running EPICS Base should update to version 7.0.11, which includes the fixes, because the flaws could let an attacker cause denial of service, corrupt memory, disclose sensitive information or potentially execute arbitrary code, according to CISA.
- When
- 27 Oct 2026
- ID
WTA-N-2026-0454- Where
- United States, International
- Who
- Causal Security, Los Alamos National Laboratory, Argonne National Laboratory, CISA, ITER; Shubham Raj
- Topics
- AI agents, Cybersecurity, AI incidents
- System
- Cipher, an autonomous AI agent
- Operator
- Causal Security
- Type
- found four unknown flaws in EPICS Base, one critical (9.8) and three high-severity
- Status
- fixed in EPICS Base 7.0.11; reported 27 Oct 2026; disclosed by CISA advisory and Causal Security, reported by The Register · Incident ledger
Summary written with AI by wheresthe.ai, from The Register. Checked against the source on 27 Oct 2026.
Source copy: saved on 27 Oct 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.
Cite this story
WTA-N-2026-0454: “AI agent Cipher finds one critical and three high-severity bugs in EPICS industrial control software.” wheresthe.ai, 27 Oct 2026. https://wheresthe.ai/d/us-ai-agent-cipher-finds-one-critical-and-three-high-severit-2026-10/ (source: The Register).
Spotted an error? Email [email protected].