AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,604

AI/ML CVEs Tracked

225

Critical

New This Week

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited

Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 160 results — Critical severity, Active exploitation

CRITICAL EXPLOIT AVAIL

Langchain-Chatchat: path traversal in KB upload

Code Execution Data Extraction Supply Chain Framework RAG

langchain-chatchat CWE-22 2.6K 5 ATLAS

CRITICAL EXPLOIT AVAIL

LLaMA-Factory: RCE via unsafe checkpoint deserialization

Code Execution Supply Chain Framework Model

llamafactory CWE-94 1 6 ATLAS

CRITICAL EXPLOIT AVAIL

LangChain RequestsToolkit: SSRF exposes cloud metadata

Data Extraction Auth Bypass Framework Agent

langchain CWE-918 2.6K 5 ATLAS

CRITICAL EXPLOIT AVAIL

llama_index: SQL injection in vector store integrations

Data Extraction Data Leakage Supply Chain Framework RAG

llama-index Patch: 0.12.28 CWE-89 229 5 ATLAS

CRITICAL EXPLOIT AVAIL

vLLM: RCE via exposed TCPStore in distributed inference

Code Execution Data Extraction Inference Framework

vllm CWE-502 126 4 ATLAS

CRITICAL EXPLOIT AVAIL

browser-use: URL allowlist bypass enables SSRF in agents

Auth Bypass Data Extraction Agent Framework

browser-use Patch: 0.1.45 CWE-647 65 5 ATLAS

CRITICAL EXPLOIT AVAIL

vLLM: RCE via pickle deserialization on ZeroMQ

Code Execution Supply Chain Inference Framework

vllm CWE-502 126 5 ATLAS

CRITICAL EXPLOIT AVAIL

PyTorch: RCE bypasses weights_only=True safe-load guard

Code Execution Supply Chain Framework Model Inference

pytorch CWE-502 21.7K 6 ATLAS

CRITICAL EXPLOIT AVAIL

jupyter-remote-desktop-proxy: VNC network exposure

CVE-2025-32428

EPSS 0.2%

1y ago

Auth Bypass Data Leakage Privacy Violation Framework

jupyter-remote-desktop-proxy Patch: 3.0.1 CWE-668 1.9K 5 ATLAS

CRITICAL EXPLOIT AVAIL

BentoML: RCE via insecure deserialization in runner

Code Execution Data Extraction Supply Chain Framework Inference

bentoml CWE-502 22 5 ATLAS

CRITICAL KEV SCANNER

Langflow: Unauth RCE via code injection endpoint

Code Execution Auth Bypass Framework Agent

langflow CWE-94 5 ATLAS

CRITICAL EXPLOIT AVAIL

BentoML: unauthenticated RCE via insecure deserialization

Code Execution Supply Chain Framework Inference

bentoml CWE-502 22 5 ATLAS

CRITICAL EXPLOIT AVAIL

InvokeAI: RCE via unsafe torch.load deserialization

Code Execution Supply Chain Framework Model

CWE-502 5 ATLAS

CRITICAL EXPLOIT AVAIL

pytorch-lightning: file upload RCE (Windows)

Code Execution Supply Chain Framework Training Data

pytorch-lightning Patch: 2.4.0 CWE-434 1.6K 4 ATLAS

CRITICAL EXPLOIT AVAIL

llama-index finchat: SQL injection enables RCE

Code Execution Supply Chain Data Extraction Agent Framework Plugin

llama-index-packs-finchat CWE-89 229 5 ATLAS

CRITICAL EXPLOIT AVAIL

llama-index DuckDB retriever: SQLi enables RCE

Code Execution Supply Chain Data Extraction Framework RAG Plugin

llama-index-retrievers-duckdb-retriever Patch: 0.4.0 CWE-89 229 5 ATLAS

CRITICAL EXPLOIT AVAIL

BentoML: unauthenticated RCE via runner deserialization

Code Execution Supply Chain Framework Inference

bentoml CWE-502 22 3 ATLAS

CRITICAL EXPLOIT AVAIL

vllm: RCE via unsafe pickle deserialization in RPC server

Code Execution Supply Chain Framework Inference

vllm CWE-78 126 5 ATLAS

CRITICAL EXPLOIT AVAIL

vllm: RCE via unsafe pickle deserialization in MessageQueue

Code Execution Framework Inference

vllm CWE-502 126 4 ATLAS

CRITICAL EXPLOIT AVAIL

vLLM: RCE via unsafe deserialization in Mooncake KV

Code Execution Supply Chain Framework Inference

vllm CWE-502 126 5 ATLAS

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial

AI Security Threat Feed

Weekly CISO Take + top threats

Latest AI Security Threats

Need deeper analysis?