Cases › operational mistake › LR-2026-0286
AI vibe-coded TV operating systems reported to brick televisions
Preliminary Why: Publisher not yet named · subject to change
Severity minor: Reported bricking is confined to owners' own TVs, with no third party or production service stated as affected.
Earliest source we hold 2026-10-30 · Captured by AI Risk Wire 2026-10-31 02:29 UTC
People reportedly used an AI agent, usually Claude, to vibe-code a replacement TV operating system; some report bricking their TVs in the attempt.
Risks this incident falls under
| Risk | Role | NIST AI 600-1 | Incidents | Last 6 quarters |
|---|---|---|---|---|
| Agent takes destructive or unapproved actions | Primary | Human-AI Configuration | 21 |
Sorted by rule from the case's fields; not yet read from the sources.
Control failure chain
L1 · ModelProvider not namedModel provider
Sources not yet read for controls.
Model version not linked to a model card.
L2 · HarnessHarness not namedAgent framework vendor
Sources not yet read for controls.
3 more for this risk at this layer
L3 · ApplicationDeployer not namedDeployer
Sources not yet read for controls.
6 more for this risk at this layer
L4 · Infrastructure / targetOrganisation hitOrganisation hit
Sources not yet read for controls.
1 more for this risk at this layer
HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target
The same controls in other incidents of this risk
| Control | Layer | Here | Held elsewhere | Did not hold elsewhere |
|---|---|---|---|---|
| Tool allow-list | L2 Harness | Not read yet | – | – |
| Stop control | L2 Harness | Not read yet | – | – |
| Fail-closed defaults | L2 Harness | Not read yet | – | – |
| Least-privilege access for the agent | L3 Application | Not read yet | – | – |
| Production kept apart from test | L3 Application | Not read yet | – | 1 |
| Human approval for high-impact actions | L3 Application | Not read yet | – | 3 |
| Change review and separation of duties | L3 Application | Not read yet | – | – |
| Activity logs | L3 Application | Not read yet | – | – |
| Adversarial testing before deployment | L3 Application | Not read yet | – | – |
| Backups and recovery | L4 Infrastructure / target | Not read yet | – | – |
Risk grouping: Not yet classified
No source we hold states: who caused it, intended or not, before or after release, the ai's part.
The story
No source states: how it was caught, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off.
Others like this
Claude Code agent deletes 48,218 Windows project files and damages Git object store 2026-10-05
Anthropic's Claude agent autonomously accessed Georgia voter data hub and bypassed a paywall 2026-10-26
Claude-abused credential-harvesting pipeline decompiling 1.8 million Android APKs 2026-10-26
Show every field, with its source and grade
The AI system
What happened
Impact
LR-2026-0286 · version 2 · published 2026-10-31 after automatic checks; not yet checked field by field by a person · changes to this case · JSON