# Orca Security report finds 99.9% of fixable AI vulnerabilities unpatched

> The 2026 State of AI Security Report says more than half of firms run AI in production, but almost all known fixable flaws are still open.

Oossa · 2026-11-10 · https://oossa.com/en/orca-security-report-finds-99-9-of-fixable-ai-vulnerabilities-unpatched

Orca Security released its 2026 State of AI Security Report. It surveyed over 1,200 live cloud environments. The study shows 56% of organisations have AI agents in production and 51% use AI to build their own apps. At the same time, 81% run AI packages that contain known vulnerabilities, and 99.9% of fixable AI flaws remain unaddressed.

## The facts

- 56% of organisations run AI agents in production
- 99.9% of fixable AI vulnerabilities are still unpatched

## Why it matters

Unpatched AI flaws leave most companies exposed as they scale AI into critical services.

## Sources & references

1. [Orca Security 調査レポート：AI が本番環境へと移行するなか、修正可能な AI 脆弱性の 99.9% が未対応のまま](http://www.businesswire.com/news/home/20261109628033/ja/?feedref=JjAwJuNHiystnCoBq_hl-WsGkFyUNMTSNrPsg57HLEqqcp-o_pnudlUwsb5apQ1S4gUE65BTfjH3-pSuqdv0gW3cb3F4oTIgUqCPafFkgu5AneicJQDNboWvodvG82E0) – Business Wire, 2026-11-10
2. [Black Kite Research Reveals Widespread Security Gaps Across AI Supply Chain, Exposing Enterprises to Growing Third-Party Cyber Risk](https://www.prnewswire.com/news-releases/black-kite-research-reveals-widespread-security-gaps-across-ai-supply-chain-exposing-enterprises-to-growing-third-party-cyber-risk-302933810.html) – PR Newswire RSS, 2026-11-10

Last updated: 2026-11-10