vulnerability
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
Medium
Summary
A critical flaw in the x402 SDK, used by AI agents to pay for API calls, has been discovered by V12 Security. The issue stems from a lack of spending limits in the default client and has been addressed in recent releases, but many developers are still running older versions. Upgrading to the latest releases is crucial to mitigate these risks.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data