JDP Security Research Series

Vulnerability Disclosures & Technical White Papers

Welcome to the central portal for the 2026 AI Orchestration Framework Research Series. This repository houses verified vulnerability disclosures, proof-of-concept walk-throughs, and structural defense guidelines targeting major agentic runtime frameworks.

Published Advisories

AI Orchestration Research Series — 2026

• Disclosure 001 (JDP-2026-001): Microsoft Semantic Kernel & Agent Framework 1.0
  The Orchestration Trust Gap: Remediation Evasions in Microsoft Semantic Kernel and Agent Framework 1.0 (CVSS 10.0)

• Disclosure 002 (JDP-2026-002): Microsoft Agent Framework v1.0.0
  Infrastructure Breach: Container Privilege Escalation via Automated Host Socket Mounting (CVSS 10.0)

• Disclosure 003 (JDP-2026-003): LlamaIndex Core
  Infrastructure Compromise: Path Traversal to Arbitrary File Write and Code Injection in LlamaIndex (CVSS 10.0)

• Disclosure 004 (JDP-2026-004): LangChain Core
  Architectural Boundary Failures: LangChain-Core Insecure AI Orchestration Vulnerability (CVSS 10.0)

• Disclosure 005 (JDP-2026-005): Deepset Haystack
  Architectural Boundary Limitations: RCE via Serialization Bypass and Persistent Framework Compromise in Haystack (CVSS 10.0)

---

All research published here is formatted for direct integration into enterprise application security threat models and architectural standards.