At Black Hat USA 2026, Check Point Research disclosed eleven vulnerabilities across six major agent frameworks. The vulnerability classes were textbook web application bugs. The frameworks had been treated as trusted infrastructure. A policy-as-code gate above the framework closes the exposure regardless of which framework the agent runs on.