AI Security Threat Feed

Code Execution Supply Chain Framework Training Data

MLflow: RCE via malicious MLproject file execution

mlflow CWE-94 624 6 ATLAS

Code Execution Supply Chain Framework Training Data

MLflow: RCE via deserialization in crafted Recipes

Code Execution Supply Chain Framework Model

MLflow: RCE via malicious PyTorch model deserialization

mlflow CWE-502 624 4 ATLAS

Supply Chain Code Execution Framework Model Agent

MLflow: RCE via malicious LangChain model deserialization

MLflow: RCE via malicious TensorFlow model deserialization

MLflow: RCE via LightGBM model deserialization

Code Execution Supply Chain Framework Model

MLflow: RCE via pmdarima model deserialization

MLflow: deserialization RCE via malicious PyFunc model

MLflow: RCE via malicious scikit-learn model deserialization

Code Execution Supply Chain Framework Model

MLflow: RCE via malicious scikit-learn model upload

Code Execution Data Extraction Inference Framework API

HIGH KEV

Ollama: path traversal enables RCE via model blob API

ollama 1.5K 4 ATLAS

Auth Bypass Data Extraction API Plugin

WordPress ChatBot: missing authz deletes OpenAI files

wpbot CWE-862 4 ATLAS

Auth Bypass Data Leakage Model Poisoning API Plugin

WordPress AI ChatBot: auth bypass enables OpenAI file upload

wpbot CWE-862 5 ATLAS

HIGH EXPLOIT AVAIL SCANNER

MLflow: URL fragment bypass leaks SSH and cloud keys

Data Extraction Auth Bypass Framework

mlflow CWE-22 624 4 ATLAS

Data Leakage Data Extraction API Framework

SolidUI: OpenAI API key exposed via log print statement

5 ATLAS

Data Leakage Data Extraction Framework Inference API

Gradio: credential leakage via Windows path encoding bug

gradio CWE-116 679 5 ATLAS

Code Execution Supply Chain Framework Training Data

SageMaker SDK: pickle deserialization enables RCE

4 ATLAS

Supply Chain Code Execution Framework Inference

PyTorch: use-after-free in JIT mobile interpreter, RCE

pytorch 21.9K 3 ATLAS