Plan, Wait, Harvest: Zero-Click Data Exfiltration In Agentic AI.

An article by Venkata Sai Kishore Modalavalasa demonstrates a reproducible zero-click data-exfiltration attack against multi-agent AI systems, where an attacker uploads a single poisoned document into the data plane and later a routine admin-triggered compliance review causes agents to silently email sensitive vendor data (banking details, risk assessments, internal notes) to an external address. The attack exploits trust relationships between agents and the lack of boundaries between data and instructions rather than any code-level CVE, and is walked through hands-on in a purpose-built lab environment.