Distributed Consensus Split-Brain State Divergence
Asymmetric network partition caused two leader nodes to accept client writes simultaneously, corrupting ledger state.
Illustrative scenario, not a real incident
What happened
Contributing factors stated by the source
- Asymmetric network partition caused two leader nodes to accept client writes simultaneousl...
The failure pattern
Watch the pattern: Partial success leaves systems out of sync
Related standards
CollectSEA's mapping through this incident's failure pattern; not an official determination by the standards bodies.
- ASI01 Agent Goal Hijack
- ASI02 Tool Misuse and Exploitation
- ASI06 Memory and Context Poisoning
- LLM01 Prompt Injection
- LLM02 Sensitive Information Disclosure
- AC-4 Information Flow Enforcement
- SC-24 Fail in Known State
- SI-10 Information Input Validation
- MAP 5.1 Estimate impacts from past uses and public incident reports
- Goal 3 Reducing entire classes of vulnerability
- CWE-1427 Improper Neutralization of Input Used for LLM Prompting
Building something similar?
Describe your design and see every precedent that applies, with safeguards you can hand to your coding agent.
Incidents with the same pattern
43-second network partition triggers database failover and unreplicated writes (GitHub, 2018)
Network maintenance caused a 43-second loss of connectivity between GitHub's US East Coast hub and its primary data center, which led to 24 hours and 11 minutes of degraded service.
Prompt injection makes GitHub Copilot turn off its own confirmations and run commands (CVE-2025-53773)
Instructions planted in content the agent reads could make GitHub Copilot write "chat.tools.autoApprove": true into the project's .vscode/settings.json, which turns off all user confirmations.
Prompt injection in a README plus weak allow-list matching lets Gemini CLI silently run attacker commands (2025)
Researchers hid a prompt injection inside a README.md (in the text of a software license) so that Gemini CLI, asked only to inspect a codebase, would request shell commands.
Hidden instructions in a support ticket make an MCP-connected assistant expose private SQL tables (Supabase MCP, 2025)
General Analysis showed that hidden instructions in a customer support ticket could make a developer's MCP-connected assistant query a private table of integration tokens.
EchoLeak: zero-click prompt injection lets a crafted email exfiltrate Microsoft 365 Copilot data (2025)
EchoLeak (CVE-2025-32711, CVSS 9.3) is a zero-click vulnerability in Microsoft 365 Copilot in which a crafted email could trigger indirect prompt injection.
Prompt injection in a public GitHub issue makes an MCP-connected agent leak private repository data (2025)
Invariant Labs showed that a malicious instruction placed in an issue on a public repository could be read by an agent connected through the GitHub MCP server.