{"id":5281,"date":"2026-10-14T22:12:42","date_gmt":"2026-10-14T22:12:42","guid":{"rendered":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2026\/10\/14\/ai-agent-security-risks-what-can-go-wrong-when-agents-act-on-their-own\/"},"modified":"2026-10-14T22:12:42","modified_gmt":"2026-10-14T22:12:42","slug":"ai-agent-security-risks-what-can-go-wrong-when-agents-act-on-their-own","status":"publish","type":"post","link":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2026\/10\/14\/ai-agent-security-risks-what-can-go-wrong-when-agents-act-on-their-own\/","title":{"rendered":"AI Agent Security Risks: What Can Go Wrong When Agents Act on Their Own"},"content":{"rendered":"<p class=\"wp-block-paragraph\">The thing that makes an <a href=\"https:\/\/www.docker.com\/blog\/what-are-ai-agents\/\" target=\"_blank\" rel=\"noreferrer noopener\">AI agent<\/a> useful, its freedom to act, is also what can introduce risk. An agent doesn\u2019t just answer a question, it browses, runs code, and calls tools on its own, so a single bad or manipulated instruction can turn into real damage instead of just a wrong answer. That\u2019s the shift traditional application security wasn\u2019t built for, and it\u2019s why <a href=\"https:\/\/www.docker.com\/blog\/manufacturing-trust-for-ai-agents-keynote\/\" target=\"_blank\" rel=\"noreferrer noopener\">trust has to be built into the system around the agent<\/a>, not assumed.<\/p>\n<p class=\"wp-block-paragraph\">An agent decides its own path, picking tools at runtime, chaining actions together, and usually running with the credentials of whoever launched it. That autonomy is the source of most agent-specific risk, and it points to the two-part answer that runs through this post: contain what an agent can reach, and oversee what it does.<\/p>\n<div class=\"wp-block-ponyo-zeta organism toc-exclude\">\n<blockquote class=\"container\">\n<h2 class=\"wp-block-ponyo-heading text-lg\">\n        Key takeaways<br \/>\n    <\/h2>\n<ul class=\"wp-block-list\">\n<li>AI agents introduce risks traditional app security wasn\u2019t built for: they choose tools, chain actions, and often run with your credentials.<\/li>\n<li>The main risks are prompt injection, tool misuse and poisoning, excessive autonomy, credential exposure, and data exfiltration.<\/li>\n<li>Most trace back to one thing: the agent can act, so containment and oversight matter more than the model.<\/li>\n<li>The two-part answer is isolation to limit blast radius and governance to oversee behavior.<\/li>\n<\/ul>\n<\/blockquote>\n<\/div>\n<h2 class=\"wp-block-heading\">Why agents break traditional security models<\/h2>\n<p class=\"wp-block-paragraph\">If you\u2019ve secured web services, the model is familiar: requests arrive at known endpoints, deterministic logic handles them, and you design controls around that predictability. Agents break that assumption. They interpret instructions dynamically, choose tools at runtime, and run multi-step chains with very little human intervention at each step. A coding agent might read a file, install a dependency, change config, run tests, and push a commit from a single prompt.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">Because an agent chooses its own path, a compromised or misdirected one can take a far wider range of actions than a traditional service. Every risk below has already produced <a href=\"https:\/\/www.docker.com\/blog\/ai-coding-agent-horror-stories-security-risks\/\" target=\"_blank\" rel=\"noreferrer noopener\">documented real-world incidents<\/a>, and they all follow from that shift.<\/p>\n<div class=\"wp-block-ponyo-image\">\n                <img data-opt-id=2034980354  fetchpriority=\"high\" decoding=\"async\" width=\"2320\" height=\"1218\" src=\"https:\/\/www.docker.com\/app\/uploads\/2026\/10\/docker_AI-Agent-Security-Risks-2320x1218.jpg\" class=\"fade-in\" alt=\"Diagram of the top AI agent security risks including prompt injection, data exfiltration, tool misuse and poisoning, excessive autonomy, and credential and secrets exposure.\" title=\"- docker AI Agent Security Risks\" \/>\n        <\/div>\n<h2 class=\"wp-block-heading\">1. Prompt injection<\/h2>\n<p class=\"wp-block-paragraph\">Prompt injection is the risk that defines agent security. Because an agent acts on whatever text it reads, an attacker doesn\u2019t need access to your systems. They just need the agent to encounter their instructions, hidden in a web page, a code comment, an issue, or a document it summarizes.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">A real prompt-injection case showed an agent following instructions buried in repository content and taking actions its user never intended.\u00a0<\/p>\n<div class=\"wp-block-ponyo-table\" data-highlighted-columns=\"null\" data-highlighted-rows=\"null\">\n<table class=\"responsive-table\">\n<tbody class=\"wp-block-ponyo-table-body\" data-highlighted-columns=\"[]\" data-highlighted-rows=\"[]\">\n<tr class=\"wp-block-ponyo-table-row\">\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\"><strong>Incident highlight:<\/strong> A coding agent followed instructions <a href=\"https:\/\/www.docker.com\/blog\/mcp-horror-stories-github-prompt-injection\/\" target=\"_blank\" rel=\"noreferrer noopener\">buried in a repository\u2019s own content<\/a> and took actions its user never intended. The malicious text arrived through data the agent was simply asked to read.<\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p class=\"wp-block-paragraph\">The agent has no reliable way to tell a legitimate instruction from an injected one, so the defense is to limit what a hijacked agent can reach.<\/p>\n<h2 class=\"wp-block-heading\">2. Tool misuse and tool poisoning<\/h2>\n<p class=\"wp-block-paragraph\">Agents act through tools: API connectors, database queries, file operations, and code execution. Every tool is an access vector, and two things could go wrong.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">An agent can be given more tools than the task needs, widening the attack surface for no reason. And a tool itself can be poisoned, its description carrying hidden instructions that manipulate the agent into misusing it. The mitigations are to scope tools to the task at runtime, source them from <a href=\"https:\/\/www.docker.com\/products\/mcp-catalog-and-toolkit\/\" target=\"_blank\" rel=\"noreferrer noopener\">registries with verified provenance<\/a>, and review tool descriptions rather than trusting them by default.<\/p>\n<h2 class=\"wp-block-heading\">3. Excessive autonomy<\/h2>\n<p class=\"wp-block-paragraph\">The more an agent can do without review, the more a single bad decision costs. Excessive autonomy is the risk of granting an agent broad, standing permission to act, most visibly when developers run <a href=\"https:\/\/www.docker.com\/blog\/what-is-yolo-mode\/\" target=\"_blank\" rel=\"noreferrer noopener\">YOLO mode<\/a>, where every action is auto-approved. This autonomy is genuinely useful, so switching it off defeats the point. The better move is to run the agent where that autonomy can\u2019t reach anything it shouldn\u2019t, so speed doesn\u2019t necessarily mean increased blast radius.<\/p>\n<div class=\"wp-block-ponyo-table\" data-highlighted-columns=\"null\" data-highlighted-rows=\"null\">\n<table class=\"responsive-table\">\n<tbody class=\"wp-block-ponyo-table-body\" data-highlighted-columns=\"[]\" data-highlighted-rows=\"[]\">\n<tr class=\"wp-block-ponyo-table-row\">\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\"><strong>Incident highlight:<\/strong> A developer asked a coding agent to clean up an old repository. It generated an <code>rm -rf<\/code> command with a trailing <code>~\/<\/code> and ran it with no confirmation step, <a href=\"https:\/\/www.docker.com\/blog\/coding-agent-horror-stories-the-rm-rf-incident\/\" target=\"_blank\" rel=\"noreferrer noopener\">wiping the developer\u2019s entire home directory<\/a>. Nothing in the setup gave a human a chance to catch it before it executed.<\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2 class=\"wp-block-heading\">4. Credential and secret exposure<\/h2>\n<p class=\"wp-block-paragraph\">When an agent runs under a developer\u2019s personal token, every action it takes carries that person\u2019s full permissions, and a compromise hands those permissions to an attacker. Secrets sitting in prompts, config files, or environment variables baked into an image make it worse, because a prompt injection can read them straight out of the agent\u2019s context. Agents should get their own scoped, short-lived credentials, injected at runtime and kept out of the conversation, rather than borrowing yours.<\/p>\n<div class=\"wp-block-ponyo-table\" data-highlighted-columns=\"null\" data-highlighted-rows=\"null\">\n<table class=\"responsive-table\">\n<tbody class=\"wp-block-ponyo-table-body\" data-highlighted-columns=\"[]\" data-highlighted-rows=\"[]\">\n<tr class=\"wp-block-ponyo-table-row\">\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\"><strong>Incident highlight:<\/strong> An AWS engineer handed a small Cost Explorer bug to a coding agent running with their own operator-level access. The agent decided the cleanest fix was to <a href=\"https:\/\/www.docker.com\/blog\/coding-agent-horror-stories-the-agent-that-deleted-production\/\" target=\"_blank\" rel=\"noreferrer noopener\">delete and rebuild the production environment<\/a>, and it held the credentials to do exactly that. The result was a thirteen-hour regional outage.<\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2 class=\"wp-block-heading\">5. Data exfiltration and untrusted handoffs<\/h2>\n<p class=\"wp-block-paragraph\">An agent with network access and sensitive information in its context can send that data somewhere it shouldn\u2019t, whether through a compromised tool or an injected instruction. The risk grows in multi-agent setups, where one agent passes work to another. If the receiving agent treats that input as trusted, a compromise in one link can spread down the chain. Restricting network egress to known endpoints and treating every agent-to-agent handoff as untrusted input could keep a single failure from spreading.<\/p>\n<h2 class=\"wp-block-heading\">How to contain the risk<\/h2>\n<p class=\"wp-block-paragraph\">The risks are varied, but there are <a href=\"https:\/\/www.docker.com\/blog\/how-to-secure-ai-agents\/\" target=\"_blank\" rel=\"noreferrer noopener\">controls to secure AI agents<\/a>. Isolate where the agent runs so a mistake or a hijack is trapped in a disposable environment instead of loose on your host, and scope what the agent can access so the damage it can do is small even inside that boundary.<\/p>\n<div class=\"wp-block-ponyo-table\" data-highlighted-columns=\"null\" data-highlighted-rows=\"null\">\n<table class=\"responsive-table\">\n<tbody class=\"wp-block-ponyo-table-body\" data-highlighted-columns=\"[]\" data-highlighted-rows=\"[]\">\n<tr class=\"wp-block-ponyo-table-header\">\n<th class=\"wp-block-ponyo-cell\" data-responsive-table-heading=\"Risk\">\n<p class=\"wp-block-paragraph\">Risk<\/p>\n<\/th>\n<th class=\"wp-block-ponyo-cell\" data-responsive-table-heading=\"Primary control\">\n<p class=\"wp-block-paragraph\">Primary control<\/p>\n<\/th>\n<\/tr>\n<tr class=\"wp-block-ponyo-table-row\">\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\"><strong>Primary injection<\/strong><\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\">Isolation, so a hijacked agent can\u2019t reach anything that matters<\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<\/tr>\n<tr class=\"wp-block-ponyo-table-row\">\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\"><strong>Tool misuse and poisoning<\/strong><\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\">Runtime-scoped tools from verified-provenance sources<\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<\/tr>\n<tr class=\"wp-block-ponyo-table-row\">\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\"><strong>Excessive autonomy<\/strong><\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\">A sandbox boundary that makes auto-approval safe<\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<\/tr>\n<tr class=\"wp-block-ponyo-table-row\">\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\"><strong>Credential exposure<\/strong><\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\">Dedicated, short-lived credentials injected at runtime<\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<\/tr>\n<tr class=\"wp-block-ponyo-table-row\">\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\"><strong>Data exfiltration<\/strong><\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<td class=\"wp-block-ponyo-cell\">\n                    <span class=\"responsive-table-label\"><\/span>\n<p>                    <span class=\"responsive-table-value\"><br \/>\n                                                    <span class=\"responsive-table-value-content\"><\/span><\/span><\/p>\n<p class=\"wp-block-paragraph\">Allow-listed network egress and untrusted inter-agent input<\/p>\n<p>                    <br \/>\n                                            \n            <\/p><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p class=\"wp-block-paragraph\">Isolation is the highest-impact starting point, and a <a href=\"https:\/\/www.docker.com\/blog\/why-microvms-the-architecture-behind-docker-sandboxes\/\" target=\"_blank\" rel=\"noreferrer noopener\">microVM boundary<\/a> makes it strong without slowing the agent down. On top of containment, oversight is what keeps a fleet of agents accountable. Then, <a href=\"https:\/\/www.docker.com\/blog\/what-is-ai-governance\/\" target=\"_blank\" rel=\"noreferrer noopener\">AI governance<\/a> defines which actions an agent may take, what it can reach, and how its behavior is logged, so risk is managed deliberately rather than discovered after an incident.<\/p>\n<h2 class=\"wp-block-heading\">Contain the blast radius, govern the behavior<\/h2>\n<p class=\"wp-block-paragraph\">These risks aren\u2019t reasons to avoid developing with agents. Instead, we need to give agents the freedom to finish the job by building trust into the system around them, so that freedom never means access to everything.<\/p>\n<p class=\"wp-block-paragraph\">And that\u2019s the job <a href=\"https:\/\/www.docker.com\/products\/docker-sandboxes\/\">Docker Sandboxes<\/a> is built for: each agent runs in its own disposable microVM with the network and filesystem controls you define, so a mistake or an injection is contained by design. And <a href=\"https:\/\/www.docker.com\/products\/ai-governance\/\">AI Governance<\/a> adds the oversight layer, setting which actions, tools, and credentials are allowed and enforcing it everywhere your team works. Contain the blast radius, and govern the behavior.<\/p>\n<h2 class=\"wp-block-heading\">Frequently Asked Questions<\/h2>\n<div class=\"wp-block-ponyo-dominique organism\">\n<div class=\"container faq-list\">\n<div class=\"fade-in wp-block-ponyo-frank\">\n<h3 class=\"frank-heading\">\n        What are the main security risks of AI agents?<br \/>\n        <span class=\"closed\"><br \/>\n<\/span><br \/>\n        <span class=\"open\"><br \/>\n<\/span><br \/>\n    <\/h3>\n<div class=\"content-outer\">\n<div class=\"content-inner\">\n<p class=\"wp-block-paragraph\">The most significant are prompt injection, tool misuse and tool poisoning, excessive autonomy, credential and secret exposure, and data exfiltration. All of them stem from the fact that agents act on their own, using tools and credentials, rather than following a fixed, reviewable path.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"fade-in wp-block-ponyo-frank\">\n<h3 class=\"frank-heading\">\n        What is the biggest AI agent security risk?<br \/>\n        <span class=\"closed\"><br \/>\n<\/span><br \/>\n        <span class=\"open\"><br \/>\n<\/span><br \/>\n    <\/h3>\n<div class=\"content-outer\">\n<div class=\"content-inner\">\n<p class=\"wp-block-paragraph\">For most teams it\u2019s excessive access: an agent running with more autonomy and more credentials than the task needs. It turns a small mistake or a single prompt injection into a large incident, because the agent can reach so much.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"fade-in wp-block-ponyo-frank\">\n<h3 class=\"frank-heading\">\n        How is agent security different from application security?<br \/>\n        <span class=\"closed\"><br \/>\n<\/span><br \/>\n        <span class=\"open\"><br \/>\n<\/span><br \/>\n    <\/h3>\n<div class=\"content-outer\">\n<div class=\"content-inner\">\n<p class=\"wp-block-paragraph\">Traditional application security assumes predictable request-and-response flows. Agent security has to account for autonomous decisions, tools chosen at runtime, and multi-step chains where the agent sets its own path. The attack surface is wider because the agent, not a fixed program, decides what happens next.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"fade-in wp-block-ponyo-frank\">\n<h3 class=\"frank-heading\">\n        Can prompt injection be prevented?<br \/>\n        <span class=\"closed\"><br \/>\n<\/span><br \/>\n        <span class=\"open\"><br \/>\n<\/span><br \/>\n    <\/h3>\n<div class=\"content-outer\">\n<div class=\"content-inner\">\n<p class=\"wp-block-paragraph\">You can reduce it with input handling and tool hygiene, but you can\u2019t assume it away, because an agent can\u2019t reliably tell injected instructions from legitimate ones. The durable defense is containment: run the agent so that even a successfully injected one can\u2019t reach anything sensitive.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"fade-in wp-block-ponyo-frank\">\n<h3 class=\"frank-heading\">\n        How do you reduce AI agent security risks?<br \/>\n        <span class=\"closed\"><br \/>\n<\/span><br \/>\n        <span class=\"open\"><br \/>\n<\/span><br \/>\n    <\/h3>\n<div class=\"content-outer\">\n<div class=\"content-inner\">\n<p class=\"wp-block-paragraph\">Start with isolation so a compromised agent is trapped in a disposable environment. Add scoped tool access and dedicated credentials to shrink what any agent can do. Then layer on governance to define and enforce those limits consistently across every agent your team runs.<\/p>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div>\n<p class=\"wp-block-paragraph\">\n<\/p>","protected":false},"excerpt":{"rendered":"<p>The thing that makes an AI agent useful, its freedom to act, is also what can introduce risk. An agent [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":5282,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[4],"tags":[],"class_list":["post-5281","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-docker"],"_links":{"self":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/5281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/comments?post=5281"}],"version-history":[{"count":0,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/5281\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media\/5282"}],"wp:attachment":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media?parent=5281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/categories?post=5281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/tags?post=5281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}