AI Threat Alert AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,604

AI/ML CVEs Tracked

225

Critical

79

New This Week

16

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited
Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 267 results — Medium severity, Active exploitation
MEDIUM EXPLOIT AVAIL

HuggingFace Transformers: RCE via malicious checkpoint load

CVE-2026-1839
6.5
EPSS 0.0%
Code Execution Supply Chain Framework Training Data
transformers Patch: 5.0.0rc3 CWE-502 7.8K 3 ATLAS
MEDIUM EXPLOIT AVAIL

ONNX: symlink traversal reads host files via model loading

CVE-2026-34447
5.5
EPSS 0.0%
Supply Chain Data Extraction Framework Model
onnx Patch: 1.21.0 CWE-22 1.1K 5 ATLAS
MEDIUM EXPLOIT AVAIL

smolagents: code injection via incomplete sandbox fix

CVE-2026-4963
6.3
EPSS 0.0%
Code Execution Supply Chain Agent Framework
smolagents CWE-74 86 5 ATLAS
MEDIUM EXPLOIT AVAIL

open-webui: missing authz allows cross-KB file deletion

CVE-2026-29070
5.4
EPSS 0.0%
Auth Bypass DoS RAG Framework
open-webui Patch: 0.8.6 CWE-862 4 ATLAS
MEDIUM EXPLOIT AVAIL

Open WebUI: path traversal leaks server filesystem path

CVE-2026-28786
4.3
EPSS 0.0%
Data Extraction Data Leakage Framework API
open-webui Patch: 0.8.6 CWE-22 4 ATLAS
MEDIUM EXPLOIT AVAIL

AI component: IDOR enables unauthorized data access

CVE-2026-30886
6.5
EPSS 0.0%
Data Leakage Code Execution API Model Inference
CWE-639 6 ATLAS
MEDIUM EXPLOIT AVAIL

AI component: Input Validation flaw enables exploitation

CVE-2026-4538
5.3
EPSS 0.0%
Model Poisoning Code Execution Framework RAG Model
CWE-20 5 ATLAS
MEDIUM EXPLOIT AVAIL

gradio: Weak Credentials allow account compromise

CVE-2026-27167
5.9
EPSS 0.0%
Supply Chain Model Poisoning Code Execution Framework Agent API
gradio CWE-522 674 8 ATLAS
MEDIUM EXPLOIT AVAIL

ray: Missing Auth allows unauthenticated access

CVE-2026-27482
5.9
EPSS 0.1%
Auth Bypass DoS Framework Inference
ray Patch: 2.54.0 CWE-306 845 4 ATLAS
MEDIUM EXPLOIT AVAIL

OpenClaw: path traversal enables arbitrary file read

CVE-2026-25475
6.5
EPSS 0.1%
Data Extraction Privacy Violation Supply Chain Agent Plugin
openclaw CWE-22 4 5 ATLAS 1 incident
MEDIUM EXPLOIT AVAIL

llama-index-core: DoS causes service disruption

CVE-2025-6208
5.3
EPSS 0.0%
DoS Framework RAG
llama-index-core Patch: 0.12.41 CWE-400 1.1K 4 ATLAS
MEDIUM EXPLOIT AVAIL

bentoml: Path Traversal enables file access

CVE-2026-24123
6.5
EPSS 0.0%
Supply Chain Data Extraction Framework Inference
bentoml CWE-22 22 8 ATLAS
MEDIUM EXPLOIT AVAIL

BetterDocs: Info Disclosure leaks sensitive data

CVE-2025-14980
6.5
EPSS 0.0%
Data Leakage Data Extraction Auth Bypass API Plugin
CWE-200 7 ATLAS
MEDIUM EXPLOIT AVAIL

monai: Path Traversal enables file access

CVE-2026-21851
5.3
EPSS 0.0%
Supply Chain Code Execution Framework
monai Patch: 1.5.2 CWE-22 105 4 ATLAS
MEDIUM EXPLOIT AVAIL

AI component: Missing Auth allows unauthorized operations

CVE-2025-14371
4.3
EPSS 0.0%
Auth Bypass Plugin API
CWE-862 4 ATLAS
MEDIUM EXPLOIT AVAIL

local-deep-research: SSRF allows internal network access

CVE-2025-67743
6.3
EPSS 0.1%
Data Extraction Auth Bypass Framework API
CWE-918 4 ATLAS
MEDIUM EXPLOIT AVAIL

langflow: SSRF allows internal network access

CVE-2025-68477
6.5
EPSS 0.0%
Data Extraction Auth Bypass Privacy Violation Framework Agent API
langflow CWE-918 8 ATLAS
MEDIUM EXPLOIT AVAIL

AI component: SQL Injection exposes database

CVE-2025-13922
6.5
EPSS 0.0%
Data Extraction Auth Bypass Plugin API
5 ATLAS
MEDIUM EXPLOIT AVAIL

dspy: security flaw enables exploitation

CVE-2025-12695
5.9
EPSS 0.0%
Data Extraction Code Execution Framework Agent
CWE-653 5 ATLAS
MEDIUM EXPLOIT AVAIL

Keras: safe_mode bypass enables file read and SSRF

CVE-2025-12058
--
EPSS 0.1%
Data Extraction Supply Chain Code Execution Framework Model
keras Patch: 3.12.0 CWE-502 1.5K 5 ATLAS

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial