Stop Your Legacy Infrastructure from Hijacking Your AI Agents

A recent analysis from XM Cyber warns that attackers can bypass AI security controls by pivoting through outdated or misconfigured systems that the AI agent depends on. It highlights an example chain involving Apache Tomcat with CVE-2025-24813, where lack of patching can lead to credential theft, Active Directory compromise, and then access to S3 data used by the AI agent’s knowledge base. This matters because CVE-driven weaknesses in “legacy” network and identity layers can translate into full compromise of AI agent outputs without directly attacking the AI stack itself.