AI Security Threat Feed

ONNX: path traversal in download_model enables RCE

open-webui: XSS enables admin session hijack via chat

Open-WebUI: CSRF enables RCE via pipeline code injection

open-webui: unauthenticated DoS disables Admin panel

open-webui: Privilege bypass enables admin account deletion

LiteLLM: RCE via post_call_rules callback injection

Open WebUI: auth bypass exposes all user files

lollms: RCE via eval() sandbox bypass in Calculate

open-webui: unauthenticated DoS via login payload flood

Open-WebUI: unauthenticated DoS via code formatter

H2O-3: unauthenticated AST parser enables DoS + file write

MLflow: CSRF in signup allows rogue account creation

MLflow: GraphQL DoS disables ML tracking server

Ollama: DoS via malicious GGUF model file upload

Ollama: GGUF model upload causes memory exhaustion DoS

Ollama: null pointer DoS via malicious GGUF model upload

BentoML: DoS via multipart boundary exhausts server

Gradio: DoS via malformed multipart boundary

MLflow: path traversal allows arbitrary file read via DBFS

ollama: divide-by-zero DoS via crafted GGUF model import