AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems — LLM frameworks, ML libraries, AI agents, vector databases, and inference servers. Vulnerabilities are tracked from NVD, GitHub Advisory, CISA KEV, MITRE ATLAS, and enriched with CVSS, EPSS, exploitation confidence, AI-component classification, and compliance mappings to ISO 42001, EU AI Act, NIST AI RMF, and OWASP LLM Top 10. Updated continuously as new CVEs are published.

Sources
Each CVE is enriched with
  • CVSS severity
  • EPSS exploit probability
  • Exploitation confidence
  • AI-component classification
  • Compliance mappings
2,385

AI/ML CVEs Tracked

340

Critical

373

New This Week

18

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited
Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 672 results — High severity, no patch
HIGH

OpenClaw versions prior to 2026.2.21 contain an authentication bypass vulnerability in the Control UI when allowInsecureAuth is explicitly enabled and the...

CVE-2026-32034
8.1
EPSS 0.4%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.2.22 contain an arbitrary shell execution vulnerability in shell environment fallback that trusts the unvalidated SHELL path...

CVE-2026-32032
7.8
EPSS 0.1%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the stageSandboxMedia function that accepts arbitrary absolute paths when...

CVE-2026-32030
7.5
EPSS 0.3%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks...

CVE-2026-32025
7.5
EPSS 0.3%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.2.24 contain an approval gating bypass vulnerability in system.run allowlist mode where nested transparent dispatch wrappers...

CVE-2026-32023
7.1
EPSS 0.3%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.2.22 contain incomplete IPv4 special-use range validation in the isPrivateIpv4() function, allowing requests to RFC-reserved...

CVE-2026-32019
7.4
EPSS 0.2%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.2.19 contain an allowlist bypass vulnerability in the exec safeBins policy that allows attackers to write arbitrary files using...

CVE-2026-32017
7.1
EPSS 0.3%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.2.22 on macOS contain a path validation bypass vulnerability in the exec-approval allowlist mode that allows local attackers to...

CVE-2026-32016
7.8
EPSS 0.1%
OpenClaw 4
HIGH

OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a path hijacking vulnerability in tools.exec.safeBins that allows attackers to bypass allowlist checks...

CVE-2026-32015
7.8
EPSS 0.1%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.2.26 contain a metadata spoofing vulnerability where reconnect platform and deviceFamily fields are accepted from the client...

CVE-2026-32014
8.0
EPSS 0.2%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.files.set methods that allows reading and...

CVE-2026-32013
8.8
EPSS 0.6%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.3.2 contain a denial of service vulnerability in webhook handlers for BlueBubbles and Google Chat that parse request bodies...

CVE-2026-32011
7.5
EPSS 0.4%
OpenClaw 4
HIGH EXPLOIT AVAIL

libarchive: RAR heap OOB read leaks memory in vLLM stacks

CVE-2026-4424
7.5
EPSS 0.9%
Data Extraction Supply Chain Inference
rhaiis/vllm-cuda-rhel9 130 3 ATLAS
HIGH EXPLOIT AVAIL

nltk: Path Traversal enables file access

CVE-2026-33236
8.1
EPSS 0.4%
Supply Chain Code Execution Framework
CWE-22 3 ATLAS
HIGH

OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with...

CVE-2026-32000
7.1
EPSS 0.6%
OpenClaw 4
HIGH

OpenClaw versions 2026.2.22 and 2026.2.23 contain an authorization bypass vulnerability in the synology-chat channel plugin where dmPolicy set to allowlist...

CVE-2026-31998
8.6
EPSS 0.3%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.2.19 contain a local command injection vulnerability in Windows scheduled task script generation due to unsafe handling of cmd...

CVE-2026-31994
7.1
EPSS 0.6%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.2.23 contain an allowlist bypass vulnerability in system.run guardrails that allows authenticated operators to execute...

CVE-2026-31992
7.1
EPSS 0.3%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.3.1 contain a server-side request forgery vulnerability in web_search citation redirect resolution that uses a...

CVE-2026-31989
7.4
EPSS 0.2%
OpenClaw 4
HIGH

OpenClaw versions prior to 2026.3.1 contain an unbounded memory growth vulnerability in the Zalo webhook endpoint that allows unauthenticated attackers to...

CVE-2026-28461
7.5
EPSS 0.4%
OpenClaw 4

Frequently asked questions

What is an AI security threat feed?

An AI security threat feed is a continuously updated stream of vulnerabilities (CVEs) affecting AI and machine-learning systems — LLM frameworks, ML libraries, AI agents, vector databases, and inference servers — filtered out of the broader CVE firehose and enriched for relevance.

Which sources are the AI CVEs tracked from?

CVEs are tracked from NVD, GitHub Advisory, CISA KEV, and MITRE ATLAS, then enriched with CVSS, EPSS, exploitation confidence, AI-component classification, and compliance mappings.

What AI systems do these vulnerabilities affect?

Coverage spans LLM frameworks, ML libraries, AI agents, vector databases, and inference servers — the components most security teams now run in production.

How often is the AI threat feed updated?

The feed updates continuously as new CVEs are published and enriched, so the most recent AI/ML vulnerabilities appear at the top.

Is the AI security feed free?

Yes — the public feed is free to browse. A Pro subscription adds breaking alerts, MITRE ATLAS mappings, compliance reports (ISO 42001, EU AI Act), and full CISO analysis.

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial