Three Dots to Root: How I Found a Path Traversal in Microsoft's Agentic Web (NLWeb)

Discovered a classic path traversal vulnerability in Microsoft&rsquo;s new Agentic Web protocol (NLWeb) that could expose sensitive files including API keys, credentials, and configuration files. The vulnerability was particularly critical as it could compromise AI agents&rsquo; &ldquo;cognitive engines&rdquo; by leaking LLM API keys. The research was featured in an exclusive interview with The…