AI Security Threat Feed
Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.
AI/ML CVEs Tracked
Critical
New This Week
In CISA KEV
Latest AI Security Threats
Showing 20 of 570 results — Medium severitypicklescan: security bypass enables RCE in ML pipelines
GHSA-cj3c-v495-4xqh picklescan: detection bypass allows malicious pickle RCE
GHSA-7cq8-mj8x-j263 picklescan: detection bypass allows RCE via ML model files
GHSA-6w4w-5w54-rjvr picklescan: RCE bypass via idlelib SetText evasion
GHSA-3vg9-h568-4w9m picklescan: scanner bypass enables RCE in ML models
GHSA-f54q-57x4-jg88 picklescan: scanner bypass enables RCE via ML models
GHSA-6vqj-c2q5-j97w picklescan: scan bypass allows RCE in ML pipelines
GHSA-x696-vm39-cp64 picklescan: scanner bypass enables RCE in ML pipelines
GHSA-g344-hcph-8vgg picklescan: bypass enables undetected RCE in ML models
GHSA-5qwp-399c-mjwf picklescan: PyTorch gadget bypasses scanner, enables RCE
GHSA-vv6j-3g6g-2pvj picklescan: PyTorch gadget bypasses pickle RCE detection
GHSA-vr7h-p6mm-wpmh picklescan: detection bypass via PyTorch proxy RCE
GHSA-h3qp-7fh3-f8h4 picklescan: RCE bypass via torch.utils.collect_env
GHSA-f745-w6jp-hpxx picklescan: scanner bypass enables RCE via PyTorch function
GHSA-f4x7-rfwp-v3xw picklescan: detection bypass enables PyTorch model RCE
GHSA-86cj-95qr-2p4f picklescan: PyTorch bypass allows undetected RCE
GHSA-4r9r-ch6f-vxmx n8n: symlink traversal enables arbitrary file read/write
CVE-2025-57749 n8n: Stored XSS enables full account takeover
CVE-2025-52478 ExecuTorch: integer overflow enables RCE via model loading
CVE-2025-54952 Ollama: arbitrary file deletion via /api/pull
CVE-2025-44779 Need deeper analysis?
Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.
Start 14-Day Free Trial
AI Threat Alert