# SZB-db26c70b7f: Researchers find hundreds of public Artex AI pentest tool instances exposed online

Security researchers report that hundreds of copies of Artex, an open source autonomous penetration testing tool, are publicly exposed to the internet.

- Type: Breach
- Status: Reported, not confirmed
- Vendor: Artex
- Product: Artex
- Disclosed: 2026-11-07 15:06 UTC
- Sources: 1 distinct
- First seen by cve.now: 2026-11-07 15:20 UTC · Updated: 2026-11-07 15:25 UTC

> No statement or filing from Artex has reached cve.now yet. Every claim below is quoted from, and linked to, the source that made it.

Written by a model from the sources below. Verify against them.

## Summary

The item says outsiders could use the exposed instances to launch cyberattacks, but it does not say whether any have been abused.

## What to do

- Check whether any Artex instance you run is reachable from the internet and restrict access.
- Require authentication on any Artex deployment and rotate its credentials.
- Review logs for unexpected use of exposed Artex instances.

## Timeline

- 2026-11-07 15:06 UTC: Made public by DataBreaches.net
- 2026-11-07 15:20 UTC: First seen by cve.now

## Evidence (1 source)

- 2026-11-07 · Press · [DataBreaches.net](https://databreaches.net/2026/11/07/no-need-to-hack-when-its-leaking-artex-edition/): “Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for anyone to access, potentially allowing outsiders to launch cyberattacks against unsuspecting targets.”

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-db26c70b7f&body=https%3A%2F%2Fcve.now%2FSZB-db26c70b7f%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about the Artex breach

### Was Artex breached?

DataBreaches.net reports it. No statement from Artex has reached cve.now yet.

### What should Artex customers do?

Check whether any Artex instance you run is reachable from the internet and restrict access. Require authentication on any Artex deployment and rotate its credentials. Review logs for unexpected use of exposed Artex instances.

## Related

- Started as early warning SZB-db26c70b7f, first seen 2026-11-07 15:20 UTC
- Browse: [Breaches](https://cve.now/breaches.md) · [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/SZB-db26c70b7f
Site guide for agents: https://cve.now/llms.txt