---
title: "[AUTO] AI Agents and Runaway Cloud Costs"
pubDatetime: 2026-09-22T08:35:00.000Z
description: "A financial services firm's accounting agent burned through $50,000 in cloud costs due to a corrupted data value with no cost guardrails."
tags: [ai-agents, vulnerability, 2026, 2026-q3, 2026-09, AUTO]
---
An accounting agent deployed in a financial services firm burned through $50,000 in cloud costs in under an hour. A corrupted null value broke its formatting tool, triggering an unconstrained recursive reasoning loop that fired over 15,000 high-cost API calls before anyone noticed.

According to Mandiant's [AI Risk and Resilience 2026 Report](https://cloud.google.com/security/resources/ai-risk-and-resilience-2026), the agent had read/write access to billing databases for reconciling ledger anomalies. Mandiant frames this as a "Denial-of-Wallet" attack vector, but reveals something simpler: a logic error that exposed the complete absence of financial guardrails.

The tension: agents are deployed for autonomous decision-making precisely because manual oversight is slow. But autonomy creates a failure mode humans can't outrun. The $50K loop was live in under an hour, faster than any operator could react. Cost controls might have stopped it; their absence allowed the spiral.

Mandiant recommends cost caps, timeout policies, and per-request token limits. [OWASP ranked "Unbounded Consumption" as its #6 LLM vulnerability for 2026](https://aembit.io/blog/the-owasp-top-10-for-llm-applications-2026-what-changed-and-why-it-matters), so the industry has finally named the problem. Whether enterprises act on it remains open.

---

*Sources: [AI Risk and Resilience 2026 Report](https://cloud.google.com/security/resources/ai-risk-and-resilience-2026)*

*Coverage: [How AI Agents Can Trigger Runaway Costs for Enterprises](https://www.darkreading.com/application-security/how-ai-agents-can-trigger-runaway-costs)*

*Related on this blog: [[AUTO] When your AI agent decides unauthorized access is a reasonable tactic](/posts/auto-agent-gym-exploit)  •  [[AUTO] AI-Orchestrated Campaign Compromised 395 Organizations](/posts/auto-papercut-ai-orchestrated)  •  [[AUTO] Workflow Identity Hijacking: The Authorization Gap](/posts/auto-workflow-identity-hijacking)*