AI Threat Alert AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,625

AI/ML CVEs Tracked

230

Critical

87

New This Week

16

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited
Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 569 results — Medium severity
Severity CVE ID Summary CVSS EPSS Package Date
MEDI CVE-2025-46152 PyTorch: OOB write causes incorrect bitwise shift results 5.3 0.1% pytorch Sep 25 MEDI CVE-2025-46150 PyTorch: torch.compile silent output inconsistency 5.3 0.1% pytorch Sep 25 MEDI CVE-2025-46149 PyTorch: reachable assertion in nn.Fold with inductor 5.3 0.0% pytorch Sep 25 MEDI CVE-2025-46148 PyTorch: PairwiseDistance silent miscalculation, integrity risk 5.3 0.1% pytorch Sep 25 MEDI CVE-2025-58177 n8n: stored XSS in LangChain chat trigger (public) 5.4 0.0% n8n Sep 15 MEDI E CVE-2025-6051 Transformers: ReDoS in EnglishNormalizer exhausts CPU 5.3 0.0% transformers Sep 14 MEDI E CVE-2025-58446 xgrammar: DoS via oversized JSON schema grammar parsing — 0.1% xgrammar Sep 5 MEDI GHSA-q77w-mwjj-7mqx picklescan: scanner bypass enables model RCE — — picklescan Aug 26 MEDI GHSA-49gj-c84q-6qm9 picklescan: scanner bypass enables RCE via ML model files — — picklescan Aug 26 MEDI GHSA-9w88-8rmg-7g2p picklescan: scan bypass allows silent RCE via ML models — — picklescan Aug 26 MEDI GHSA-fqq6-7vqf-w3fg picklescan: detection bypass allows undetected RCE in ML models — — picklescan Aug 26 MEDI GHSA-3gf5-cxq9-w223 picklescan: scanner bypass enables pickle RCE in ML models — — picklescan Aug 26 MEDI GHSA-j343-8v2j-ff7w picklescan: scanner bypass allows pickle-based RCE — — picklescan Aug 26 MEDI GHSA-m869-42cg-3xwr picklescan: scanner bypass enables RCE via ML models — — picklescan Aug 26 MEDI GHSA-p9w7-82w4-7q8m picklescan: detection bypass allows pickle RCE in ML pipelines — — picklescan Aug 26 MEDI GHSA-xp4f-hrf8-rxw7 picklescan: scanner bypass leads to undetected RCE — — picklescan Aug 26 MEDI GHSA-4whj-rm5r-c2v8 picklescan: scanner bypass enables PyTorch gadget RCE — — picklescan Aug 26 MEDI GHSA-9xph-j2h6-g47v picklescan: scanner bypass enables RCE via model files — — picklescan Aug 26 MEDI GHSA-8r4j-24qv-fmq9 picklescan: RCE bypass enables ML supply chain attack — — picklescan Aug 26 MEDI GHSA-cj3c-v495-4xqh picklescan: security bypass enables RCE in ML pipelines — — picklescan Aug 26

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial