Microsoft’s New Agentic Web Protocol Stumbles With Path Traversal Exploit

Microsoft’s New Agentic Web Protocol Stumbles With Path Traversal Exploit

If the term ‘NLWeb’ first brought to mind an image of a Dutch internet service provider, you’re probably not alone. What it actually is – or tries to become – is Microsoft’s vision of a parallel internet protocol using which website owners and application developers can integrate whatever LLM-based chatbot they desire. Unfortunately for Microsoft, the NLWeb protocol just suffered its first major security flaw. The flaw is an absolute doozy, invo…

Microsoft’s Ambitious AI Web Project Stumbles After Security Flaw Exposes User Data - Breaking Latest News

REDMOND, WA – August 7, 2025 – Microsoft has been forced to address a critical security flaw in its ambitious “Agentic Web” project after researchers discovered a vulnerability that could allow attackers to steal passwords, confidential AI keys, and other sensitive files directly from a user’s computer. The vulnerability, found in the experimental AI-driven web platform also known as NLWeb, highlights the significant security risks of deploying …