AI agent uncovers four vulnerabilities in EPICS particle accelerator control software

An autonomous AI agent has found four vulnerabilities in EPICS, the open source toolkit that helps run particle accelerators and fusion experiments, according to a report from The Register. One of the flaws is described as critical. It could let a remote attacker execute code on the machines that control some of the most expensive scientific equipment on Earth. The US Cybersecurity and Infrastructure Security Agency (CISA) flagged the issues in a Tuesday advisory. A fix is already available. What CISA found in EPICS EPICS stands for Experimental Physics and Industrial Control System. It has been maintained for decades and underpins distributed control systems across a range of sectors. CISA’s advisory, ICSA-26-300-01, was published on October 27, 2026. It covers four vulnerabilities tracked as CVE-2026-114595 through CVE-2026-114598. The affected software is EPICS Base version 7.0.10 and earlier. CISA places the impacted systems under the Critical Manufacturing sector. “Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code,” CISA warned. T...