GitHub Repos· Sep 27, 2026· by avishayil

avishayil/dvah

Open Original Article ↗
DVAH — Damn Vulnerable Agent Harness: a patch-the-runtime security lab for AI-agent platforms. Exploit a real architectural bug, trace it, patch the harness, and prove the security invariant holds.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#agent-security#ai-agents#appsec#llm#mcp#nextjs#python#security