At Pwn2Own Berlin 2026 (May 14-16), security researchers competing in a newly introduced AI hacking category successfully exploited Cursor, OpenAI’s Codex CLI, and the LiteLLM gateway, among other AI developer tools. The contest paid out a record $1,298,250 across 47 unique zero-day vulnerabilities, and analysis from Trend Micro’s Zero Day Initiative found many of the exploitable weaknesses traced back to overpowered developer-tool permissions and misplaced trust between AI coding agents and users. The flaws were responsibly disclosed to vendors for patching.