Skip to content
Submit incident
AII-1001-48099
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.Supporting sources are pending verification.

Microsoft Confirms Windows 11 AI Agents Hallucinate and Pose Security Risks

Microsoft acknowledged that AI agent features in Windows 11 are prone to hallucinations and can pose security risks to users. The company documented these concerns in materials related to experimental agentic features rolled out via a Windows 11 update.

October 2025 Β· Microsoft Β· Security and cyberattacks
October 2025
AII-1001-48099
Quick facts
Category
Security and cyberattacks
Country
United States
Date
October 2025
Drafted by
Raidu Incident Detection

What happened

Microsoft rolled out experimental agentic AI features for Windows 11 via update 26220.7262, introducing AI agents to the operating system.

The company documented in support materials that these AI agents are prone to hallucinations and can be manipulated through hidden prompts, posing security risks to users.

Reported impact

The AI agents' propensity to hallucinate and vulnerability to prompt injection attacks could expose Windows 11 users to security threats and unreliable system behavior.

Index analysis

The systems exhibit both hallucination and prompt injection vulnerabilities, which are known failure modes of large language models and AI agents deployed in operating systems.

Governance controls

Microsoft disclosed these risks in official documentation accompanying the experimental features, allowing users to be informed of the potential security issues before deployment.

Classification

Category
Security and cyberattacks
Industry
IT infrastructure and hosting
Country
United States
Harm status
Potential harm
Intent
Unintentional
Timing
Post-deployment
Harm types
Other
Harmed
Consumers
Failure modes
Hallucination, Prompt injection
AI systems
Windows 11 AI Agents

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident