AI Threat Alert AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,604

AI/ML CVEs Tracked

225

Critical

78

New This Week

16

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited
Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 512 results — has patch
MEDIUM

openclaw: operator scope bypass in phone arm/disarm cmds

GHSA-h2v7-xc88-xx8c
--
Auth Bypass Agent Plugin
openclaw Patch: 2026.3.28 CWE-285 4 3 ATLAS 1 incident
MEDIUM EXPLOIT AVAIL

MLflow: stored XSS via MLmodel YAML artifact upload

CVE-2026-33865
--
EPSS 0.0%
Code Execution Auth Bypass Data Extraction Framework Model
mlflow Patch: 3.11.1 CWE-79 624 4 ATLAS
MEDIUM EXPLOIT AVAIL

HuggingFace Transformers: RCE via malicious checkpoint load

CVE-2026-1839
6.5
EPSS 0.0%
Code Execution Supply Chain Framework Training Data
transformers Patch: 5.0.0rc3 CWE-502 7.8K 3 ATLAS
CRITICAL EXPLOIT AVAIL

PraisonAI: path traversal exposes full filesystem via agent tools

CVE-2026-35615
--
EPSS 0.1%
Data Extraction Code Execution Agent Framework
PraisonAI Patch: 1.5.113 CWE-22 1 5 ATLAS
HIGH EXPLOIT AVAIL

PraisonAI: recipe registry path traversal file write

CVE-2026-39308
7.1
EPSS 0.1%
Supply Chain Code Execution Agent Framework
PraisonAI Patch: 4.5.113 CWE-22 1 4 ATLAS
HIGH EXPLOIT AVAIL

PraisonAI: recipe path traversal allows arbitrary file write

CVE-2026-39306
7.3
EPSS 0.0%
Supply Chain Code Execution Agent Framework
PraisonAI Patch: 4.5.113 CWE-22 1 6 ATLAS
CRITICAL EXPLOIT AVAIL

PraisonAI: path traversal enables arbitrary file write/RCE

CVE-2026-39305
9.0
EPSS 0.1%
Code Execution Prompt Injection Supply Chain Agent Framework
PraisonAI Patch: 4.5.113 1 5 ATLAS
HIGH EXPLOIT AVAIL

PraisonAI: Zip Slip enables arbitrary file write / RCE

CVE-2026-39307
8.1
EPSS 0.0%
Supply Chain Code Execution Agent Framework
PraisonAI Patch: 4.5.113 CWE-23 1 5 ATLAS
MEDIUM

OpenClaw: script preflight bypass enables unsafe exec

CVE-2026-34425
--
EPSS 0.1%
Auth Bypass Code Execution Agent Plugin
openclaw Patch: 2026.4.2 CWE-184 4 4 ATLAS 1 incident
MEDIUM

kedro-datasets: path traversal enables arbitrary file write

CVE-2026-35492
6.5
EPSS 0.0%
Supply Chain Model Poisoning Code Execution Framework Training Data
kedro-datasets Patch: 9.3.0 CWE-22 2.8K 3 ATLAS
HIGH

OpenClaw: PKCE verifier leak enables OAuth token theft

CVE-2026-34511
--
EPSS 0.0%
Auth Bypass Data Extraction Agent API
openclaw Patch: 2026.4.2 CWE-345 4 4 ATLAS
HIGH EXPLOIT AVAIL

BentoML: malicious bento archive RCE via Jinja2 SSTI

CVE-2026-35044
8.8
EPSS 0.0%
Supply Chain Code Execution Framework
bentoml Patch: 1.4.38 CWE-1336 22 5 ATLAS
HIGH EXPLOIT AVAIL

BentoML: cmd injection RCE on cloud build infra

CVE-2026-35043
7.8
EPSS 0.0%
Supply Chain Code Execution Framework
bentoml Patch: 1.4.38 CWE-78 22 5 ATLAS
CRITICAL

LiteLLM: auth bypass via JWT cache key collision

CVE-2026-35030
9.1
EPSS 0.1%
Auth Bypass Data Extraction API Framework Inference
litellm Patch: 1.83.0 CWE-287 4 4 ATLAS
UNKNOWN EXPLOIT AVAIL

LiteLLM: auth bypass allows RCE and full takeover

CVE-2026-35029
--
EPSS 14.9%
Auth Bypass Code Execution Data Extraction Framework API Inference
litellm Patch: 1.83.0 CWE-863 4 6 ATLAS
MEDIUM

vLLM: OOM DoS via unbounded video frame decoding

CVE-2026-34755
6.5
EPSS 0.1%
DoS Framework Inference API
vllm Patch: 0.19.0 CWE-770 126 3 ATLAS
MEDIUM

vLLM: SSRF in batch API exposes cloud metadata endpoints

CVE-2026-34753
5.4
EPSS 0.0%
Data Extraction Auth Bypass Framework Inference
vllm Patch: 0.19.0 CWE-918 126 5 ATLAS
MEDIUM

vLLM: DoS via unbounded n parameter causes OOM crash

CVE-2026-34756
6.5
EPSS 0.0%
DoS Inference API
vllm Patch: 0.19.0 CWE-770 126 4 ATLAS
MEDIUM

OpenClaw: SSRF in marketplace fetch hits internal AI infra

GHSA-9q7v-8mr7-g23p
--
Supply Chain Data Extraction Auth Bypass Plugin Inference Agent
openclaw Patch: 2026.3.31 CWE-918 4 4 ATLAS
HIGH

onnx: TOCTOU symlink following enables arbitrary file write

GHSA-q56x-g2fj-4rj6
7.1
Supply Chain Code Execution Framework Model
onnx Patch: 1.21.0 CWE-22 1.1K 4 ATLAS

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial