Securityepicsai-agentsvulnerabilitiesindustrial-control-systemscisa
Causal Security's AI agent Cipher found four serious bugs in EPICS, the control software behind particle accelerators and ITER's fusion project, in 3 hours 49 minutes
Cipher had never seen EPICS Base before, found one critical and three high-severity memory bugs on its own, and needed one human instruction to go on to exploit testing; version 7.0.11 fixes all four.
Cipher started cold. “Cipher did the work end to end, starting from a codebase it had not seen before,” Causal Security wrote in its research post. “The investigation required no human intervention; the one human step was a single instruction authorizing deeper exploitability testing in an isolated sandbox.”
The codebase was EPICS, the Experimental Physics and Industrial Control System. Los Alamos and Argonne national labs built it decades ago, and The Register reports it runs in around 90 major projects, including Argonne’s Advanced Photon Source. ITER, the giant fusion experiment going up in France, builds its plant control kit on “the widely used open source software suites EPICS” and Control System Studio.
The worst of the four, CVE-2026-114595, is an old-school math mistake. A Channel Access write request carries a data type and an element count. EPICS checked the type, then multiplied the count by the element size in 32-bit arithmetic, which can overflow and hand back a buffer far too small for the data poured into it. Cipher’s test request wrote “attacker-influenced bytes past the undersized allocation, followed by a crash.”
That’s the moving-truck problem. You tell the rental counter you have “a few” boxes, they hand you a hatchback, and you keep loading anyway.
Causal is careful about the scary part. Remote code execution “is a potential consequence of this class of corruption, but Cipher did not demonstrate it.” The other three, rated high at 8.2, 7.5 and 7.5, crash the controller process or read past the end of memory. CISA’s advisory covers EPICS Base 7.0.10 and every release before it.
The patch took longer than the hunt, which is how it should go. Causal reported the bugs to the EPICS security channel on June 9, 2026. The Channel Access fix merged on July 23, the pvAccess fix on August 10, and EPICS Base 7.0.11 shipped on October 27, the same day as CISA’s advisory. Four hours to find, four and a half months to fix, test and release. Volunteers maintaining lab software don’t get to work at machine speed.
That gap is where this is heading. An agent that reads an unfamiliar codebase in an afternoon works the same for whoever runs it, and Raj said as much: “What’s changing is that attackers may no longer need years of specialized expertise just to discover these weaknesses.” Expect more decades-old open-source plumbing, the stuff nobody audited because nobody outside a lab had heard of it, to get this treatment from both sides.
What nobody has said yet is how many EPICS controllers sit on a network an outsider can reach, or how long the vendor-packaged copies inside beamlines and lab gear will take to catch up.