<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://permissionprotocol.com/</loc>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://permissionprotocol.com/pricing</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://permissionprotocol.com/why</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://permissionprotocol.com/how-it-works</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://permissionprotocol.com/deploy-gate</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://permissionprotocol.com/mcp-guard</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://permissionprotocol.com/gates</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://permissionprotocol.com/gates/find</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/build-or-buy</loc>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/spec</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/compliance</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/compliance/aiuc-1</loc>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/compliance/iso42001-nist</loc>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/compliance/nist</loc>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/compliance/owasp</loc>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/atf</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/integrations</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/use-cases</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/platforms</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/platforms/parallel-coding-agents</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/developers/quickstart</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/developers/api</loc>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/docs</loc>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-authorization-gap</loc>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/research/proving-human-approval-for-ai-agent-actions</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/research/immutable-audit-receipts-for-ai-agent-actions</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://permissionprotocol.com/vs</loc>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/trust</loc>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/support</loc>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://permissionprotocol.com/contact</loc>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/r/demo</loc>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/privacy</loc>
<changefreq>weekly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://permissionprotocol.com/terms</loc>
<changefreq>weekly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/amazon-kiro-powers-workspace-secret-exfiltration</loc>
<lastmod>2026-08-27</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/context7-cve-2026-75130-custom-ai-instructions-prompt-injection</loc>
<lastmod>2026-08-18</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/nvidia-nemoclaw-ollama-dns-rebinding-model-poisoning</loc>
<lastmod>2026-08-25</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/microsoft-copilot-cosnitch-cve-2026-24301-data-exfiltration</loc>
<lastmod>2026-08-18</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/aws-transform-mcp-cve-2026-18953-arbitrary-file-write</loc>
<lastmod>2026-08-05</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/grok-cryptographic-context-injection-chat-data-theft</loc>
<lastmod>2026-08-20</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/azure-sre-agent-cve-2026-62830-obo-token-privilege-escalation</loc>
<lastmod>2026-08-06</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/taiwan-digital-ministry-autonomous-multi-agent-intrusion</loc>
<lastmod>2026-08-13</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/github-copilot-autofix-snowflake-wiz-compromise</loc>
<lastmod>2026-08-17</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/openclaw-control-ui-websocket-hijacking-rce</loc>
<lastmod>2026-01-29</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/claude-code-self-patching-test-manipulation</loc>
<lastmod>2026-03-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/trustfall-coding-agent-mcp-rce</loc>
<lastmod>2026-05-07</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/pocketos-production-database-backups-deleted</loc>
<lastmod>2026-04-27</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/vercel-context-ai-oauth-breach</loc>
<lastmod>2026-04-19</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/openai-codex-branch-name-github-token-theft</loc>
<lastmod>2026-03-30</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/ai-coding-agents-vulnerable-nextjs-dependency</loc>
<lastmod>2026-03-16</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/datatalks-terraform-production-deletion</loc>
<lastmod>2026-02-26</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/amazon-kiro-aws-outage-report</loc>
<lastmod>2025-12-15</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/camoleak-copilot-chat-data-exfiltration</loc>
<lastmod>2025-10-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/replit-agent-production-data-deletion</loc>
<lastmod>2025-07-18</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/semantic-kernel-prompt-injection-rce</loc>
<lastmod>2026-05-07</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/azure-sre-agent-unauthenticated-websocket</loc>
<lastmod>2026-05-04</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/claude-code-mcp-oauth-token-theft</loc>
<lastmod>2026-05-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/cline-ai-agent-cve-2026-44211-rce-websocket</loc>
<lastmod>2026-05-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/claudebleed-claude-chrome-extension-hijack</loc>
<lastmod>2026-05-12</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/tanstack-npm-supply-chain-mini-shai-hulud</loc>
<lastmod>2026-05-11</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/summer-yue-openclaw-inbox-deletion</loc>
<lastmod>2026-02-24</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/open-webui-cve-2026-44565-path-traversal-deletion</loc>
<lastmod>2026-05-11</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/praisonai-cve-2026-44338-auth-bypass</loc>
<lastmod>2026-05-11</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/jhopkins-github-actions-prompt-injection-credential-theft</loc>
<lastmod>2026-04-15</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/claude-ot-attack-mexico-water-utility</loc>
<lastmod>2026-01-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/hugging-face-fake-openai-privacy-filter-infostealer</loc>
<lastmod>2026-05-07</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/mage-ai-mcp-kubernetes-no-auth-rce-wild</loc>
<lastmod>2026-05-14</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/openclaw-claw-chain-cve-2026-44112-privilege-escalation</loc>
<lastmod>2026-04-23</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/braintrust-aws-ai-api-key-breach-may2026</loc>
<lastmod>2026-05-04</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/claude-code-rce-deeplink-command-execution</loc>
<lastmod>2026-05-12</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/vibecoded-nextjs-ssrf-cve-2026-44578</loc>
<lastmod>2026-05-11</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/gemini-35-production-deletion-fake-postmortem</loc>
<lastmod>2026-05-21</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/github-teampcp-nx-console-breach-3800-repos</loc>
<lastmod>2026-05-22</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/composio-breach-agentic-remediation-llm-attack-may2026</loc>
<lastmod>2026-05-21</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/badhost-cve-2026-48710-starlette-fastapi-mcp-ai-agents</loc>
<lastmod>2026-05-26</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/owockibot-gitcoin-private-key-exposure</loc>
<lastmod>2026-02-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/sysdig-marimo-llm-agent-post-exploitation-cve-2026-39987</loc>
<lastmod>2026-05-10</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/meta-instagram-ai-chatbot-account-takeover-june2026</loc>
<lastmod>2026-06-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/microsoft-claude-code-github-actions-prompt-injection-secrets</loc>
<lastmod>2026-06-05</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/clickfix-fake-claude-code-codex-google-sites-developer-stealer</loc>
<lastmod>2026-06-03</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/sophos-cursor-claude-ransomware-edr-ad-toolkit</loc>
<lastmod>2026-06-03</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/wiz-miasma-worm-microsoft-github-ai-tokens-june2026</loc>
<lastmod>2026-06-05</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/litellm-cve-2026-42271-mcp-command-injection-rce</loc>
<lastmod>2026-06-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/bitwarden-cli-shai-hulud-ai-coding-credentials-apr2026</loc>
<lastmod>2026-04-22</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/oasis-claudy-day-claude-ai-prompt-injection-files-api-exfiltration</loc>
<lastmod>2026-05-27</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/trendmicro-mcp-postgres-docker-rtt-attack</loc>
<lastmod>2026-05-26</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/copilot-studio-connected-agents-backdoor-zenity</loc>
<lastmod>2025-12-29</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/litellm-pypi-teampcp-supply-chain-credential-stealer</loc>
<lastmod>2026-03-24</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/moltbook-supabase-database-agent-takeover-2026</loc>
<lastmod>2026-02-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/copirate365-defcon-m365-copilot-persistent-backdoor</loc>
<lastmod>2026-06-12</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/agentjacking-sentry-mcp-coding-agents-june2026</loc>
<lastmod>2026-06-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/hades-aitools-config-poison-developer-machine-june2026</loc>
<lastmod>2026-06-07</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/langflow-cve-2026-5027-path-traversal-unauthenticated-rce</loc>
<lastmod>2026-06-11</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/cursor-cve-2026-22708-allowlist-exec-environment-poison</loc>
<lastmod>2026-01-14</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/searchleak-cve-2026-42824-m365-copilot-exfiltration</loc>
<lastmod>2026-06-15</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/oalabs-hackers-claude-codex-breach-captured-logs</loc>
<lastmod>2026-02-02</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/idesaster-30-flaws-ai-ide-cursor-copilot-claude</loc>
<lastmod>2025-12-06</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/github-mcp-prompt-injection-private-repo-exfiltration</loc>
<lastmod>2025-05-26</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/mcp-inspector-rce-cve-2025-49596</loc>
<lastmod>2025-06-13</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/anthropic-filesystem-mcp-sandbox-escape-cve-2025-53109</loc>
<lastmod>2025-07-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/postmark-mcp-npm-bcc-email-exfiltration</loc>
<lastmod>2025-09-29</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/framelink-figma-mcp-rce-cve-2025-53967</loc>
<lastmod>2025-10-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/smithery-mcp-hosting-path-traversal-flyio-token</loc>
<lastmod>2025-06-13</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/gtg-1002-chinese-apt-claude-code-espionage</loc>
<lastmod>2025-11-13</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/mcp-remote-command-injection-cve-2025-6514</loc>
<lastmod>2025-07-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/clawhavoc-openclawchub-marketplace-malicious-skills</loc>
<lastmod>2026-02-05</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/clinejection-cline-230-npm-supply-chain</loc>
<lastmod>2026-02-17</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/smartloader-oura-mcp-stealc-infostealer</loc>
<lastmod>2026-02-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/step-finance-ai-agent-27m-solana-overpermission</loc>
<lastmod>2026-01-31</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/meta-internal-ai-agent-unauthorized-public-post-sev1</loc>
<lastmod>2026-03-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/nginx-ui-mcpwn-cve-2026-33032-unauthenticated-mcp</loc>
<lastmod>2026-04-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/azure-mcp-server-ssrf-cve-2026-26118-identity-token</loc>
<lastmod>2026-03-10</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/gemini-cli-cvss-10-rce-ghsa-wpqr-6v78-jr5g</loc>
<lastmod>2026-04-24</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/windsurf-zero-click-mcp-rce-cve-2026-30615</loc>
<lastmod>2026-04-15</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/google-vertex-ai-pickle-middle-bucket-squatting-rce</loc>
<lastmod>2026-04-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/trapdoor-supply-chain-claude-md-cursorrules-ai-poisoning</loc>
<lastmod>2026-05-19</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/mastra-npm-scope-takeover-easy-day-js-rat-sapphire-sleet</loc>
<lastmod>2026-06-16</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/mastra-npm-easy-dayjs-supply-chain-rat-june2026</loc>
<lastmod>2026-06-17</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/codewall-mckinsey-lilli-sql-injection-agent-breach</loc>
<lastmod>2026-02-28</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/echoleak-cve-2025-32711-m365-copilot-zero-click-exfiltration</loc>
<lastmod>2025-06-12</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/langgraph-checkpoint-rce-cve-2026-28277</loc>
<lastmod>2026-06-09</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/air-fake-skill-clawhub-26k-agents-june2026</loc>
<lastmod>2026-06-23</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/clawhub-scope-squatting-23-plugins-manifold-june2026</loc>
<lastmod>2026-06-22</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/amazon-q-agent-stale-wiki-retail-outage-march2026</loc>
<lastmod>2026-03-05</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/cursor-duneslide-cve-2026-50548-50549-zero-click-rce</loc>
<lastmod>2026-07-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/langflow-cve-2026-33017-unauthenticated-rce-exploited</loc>
<lastmod>2026-06-28</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/jadepuffer-langflow-autonomous-ransomware-july2026</loc>
<lastmod>2026-07-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/guardfall-shell-injection-oss-ai-agents-june2026</loc>
<lastmod>2026-06-30</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/dify-cve-2026-41947-41948-cross-tenant-data-exposure</loc>
<lastmod>2026-06-29</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/zscaler-prompt-injection-ai-agent-crypto-payments-july2026</loc>
<lastmod>2026-07-02</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/gitlost-github-agentic-workflows-prompt-injection-private-repos</loc>
<lastmod>2026-07-07</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/ghostapproval-wiz-symlink-hitl-bypass-july2026</loc>
<lastmod>2026-07-09</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/cisa-kev-langflow-cve-2026-55255-cross-user-flow-july2026</loc>
<lastmod>2026-07-07</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/ainowinstitute-friendly-fire-coding-agent-prompt-injection-rce</loc>
<lastmod>2026-07-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/autojack-autogen-studio-mcp-websocket-rce-june2026</loc>
<lastmod>2026-06-18</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/flatt-claude-code-github-action-checkwrite-bypass-june2026</loc>
<lastmod>2026-06-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/hugging-face-autonomous-ai-agent-breach-july2026</loc>
<lastmod>2026-07-16</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/anthropic-claude-breached-3-organizations-security-evals</loc>
<lastmod>2026-07-30</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/claudecode-supabase-db-deleted-10min</loc>
<lastmod>2026-08-03</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/cursor-cvss98-zeropoly-rce-august2026</loc>
<lastmod>2026-08-03</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/kiro-mcp-config-rewrite-hidden-web-text</loc>
<lastmod>2026-08-03</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/hermes-thailand-ministry-of-finance-espionage</loc>
<lastmod>2026-07-23</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/aisi-uncontrolled-supply-chain-intervention-august2026</loc>
<lastmod>2026-08-04</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/openai-irregular-eval-sandbox-breakout</loc>
<lastmod>2026-08-04</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/meta-muse-spark-unauthorized-api-spams-august2026</loc>
<lastmod>2026-08-05</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/layerx-bioshocking-agentic-browser-prompt-injection</loc>
<lastmod>2026-07-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/salesloft-drift-oauth-credential-breach-august2025</loc>
<lastmod>2025-08-15</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/amazon-q-developer-vscode-system-prompt-wiper-july2025</loc>
<lastmod>2025-07-28</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/forcedleak-salesforce-agentforce-prompt-injection-sept2025</loc>
<lastmod>2025-09-12</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/ghostjacking-observability-log-injection-rce-august2026</loc>
<lastmod>2026-08-10</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/novee-security-blackhat-claude-gemini-vulnerabilities-august2026</loc>
<lastmod>2026-08-05</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/checkpoint-blackhat-agent-frameworks-vulnerabilities-august2026</loc>
<lastmod>2026-08-05</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/australia-gym-api-idor-agentic-waitlist-manipulation-august2026</loc>
<lastmod>2026-08-14</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/claudecowork-sharedroot-sandbox-escape-cve-2026-46331</loc>
<lastmod>2026-07-22</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/rufroot-ruflo-unauthenticated-mcp-rce-cve-2026-59726</loc>
<lastmod>2026-07-30</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/agentforger-chatgpt-workspace-rogue-agent-deployment</loc>
<lastmod>2026-07-23</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/rovoblast-atlassian-rovo-parameter-prompt-injection</loc>
<lastmod>2026-08-09</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/openai-pauses-astra-development-autonomous-exploits</loc>
<lastmod>2026-08-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/unit42-deepseek-hermes-autonomous-malicious-exploit-scanning</loc>
<lastmod>2026-07-31</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/elastic-labs-claude-code-reverse-tunnels-persistence</loc>
<lastmod>2026-07-20</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/instinct-ai-email-sent-without-user-approval</loc>
<lastmod>2026-08-22</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/gitlab-duo-claude-cve-2026-18252-ci-command-execution</loc>
<lastmod>2026-08-26</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/trail-of-bits-gpt-5-6-cyber-vm-escapes</loc>
<lastmod>2026-08-26</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/chatgpt-artifactory-cross-account-gmail-exfiltration</loc>
<lastmod>2026-09-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/metr-agent-dashboard-api-key-theft-600k-credits</loc>
<lastmod>2026-03-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/openapi-react-query-codegen-mini-shai-hulud-compromise</loc>
<lastmod>2026-08-28</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/gitspawn-malicious-git-config-agent-rce</loc>
<lastmod>2026-09-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/adlc-team-skills-stolen-token-malware-injection</loc>
<lastmod>2026-07-27</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/agent-incident-tracker/gen-digital-infostealers-target-ai-agent-data</loc>
<lastmod>2026-09-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/integrations/langchain</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/integrations/openai-agents</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/integrations/crewai</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/integrations/claude-code</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/integrations/mcp</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/use-cases/ai-agent-deploy-gate</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/use-cases/github-ai-code-review</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/use-cases/mcp-tool-call-authorization</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/use-cases/data-mutation-gate</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/delegation-proof-is-not-decision-proof</loc>
<lastmod>2026-09-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/hugging-face-autonomous-ai-agent-breach</loc>
<lastmod>2026-07-24</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/mcp-policy-enforcement</loc>
<lastmod>2026-06-15</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/human-in-the-loop-approval-for-ai-agents</loc>
<lastmod>2026-06-15</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/owasp-agentic-top-10-mitigations</loc>
<lastmod>2026-06-15</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/why-agents-cannot-audit-themselves</loc>
<lastmod>2026-05-27</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/permission-protocol-owasp-agentic-top-10</loc>
<lastmod>2026-05-21</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/agt-vs-permission-protocol</loc>
<lastmod>2026-05-21</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/ai-agent-permissions-beyond-rbac</loc>
<lastmod>2026-04-02</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/claude-code-production-deploy</loc>
<lastmod>2026-04-02</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/scanning-isnt-control</loc>
<lastmod>2026-03-17</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/my-ai-nuked-production</loc>
<lastmod>2026-03-11</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/pentagon-anthropic-authorization</loc>
<lastmod>2026-03-06</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/amazon-q-developer-deploy-incident</loc>
<lastmod>2026-02-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/aws-kiro-outage-ai-governance</loc>
<lastmod>2026-02-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/cursor-is-dead</loc>
<lastmod>2026-02-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/nist-ai-agent-authorization</loc>
<lastmod>2026-02-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/openclaw-security-nightmare</loc>
<lastmod>2026-02-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/why-authorization-must-be-external</loc>
<lastmod>2026-02-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/blog/why-your-ai-agent-needs-a-deploy-gate</loc>
<lastmod>2026-02-01</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/vs/github-environment-approvals</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://permissionprotocol.com/vs/branch-protection</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
</urlset>
