AI Threat Alert AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,604

AI/ML CVEs Tracked

225

Critical

76

New This Week

16

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited
Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 512 results — has patch
Severity CVE ID Summary CVSS EPSS Package Date
HIGH E CVE-2026-1117 lollms: Access Control bypass enables privilege escalation 8.2 0.1% lollms Feb 2 MEDI E CVE-2025-6208 llama-index-core: DoS causes service disruption 5.3 0.0% llama-index-core Feb 2 HIGH E CVE-2025-10279 mlflow: security flaw enables exploitation 7.0 0.0% mlflow Feb 2 HIGH E CVE-2026-22219 chainlit: SSRF allows internal network access 7.7 0.0% chainlit Jan 20 HIGH CVE-2026-0897 keras: Resource Exhaustion enables DoS — 0.0% keras Jan 15 MEDI CVE-2025-68492 chainlit: IDOR enables unauthorized data access 4.2 0.0% chainlit Jan 14 HIGH CVE-2025-14279 mlflow: security flaw enables exploitation 8.1 0.0% mlflow Jan 12 HIGH E CVE-2026-22612 fickling: Deserialization enables RCE — 0.1% fickling Jan 9 HIGH E CVE-2026-22609 fickling: Allowlist Bypass evades input filtering — 0.1% fickling Jan 9 HIGH E CVE-2026-22608 fickling: Allowlist Bypass evades input filtering — 0.0% fickling Jan 9 HIGH E CVE-2026-22607 fickling: Allowlist Bypass evades input filtering — 0.1% fickling Jan 9 HIGH E CVE-2026-22606 fickling: Allowlist Bypass evades input filtering — 0.1% fickling Jan 9 HIGH GHSA-mcmc-2m55-j8jj vllm: Input Validation flaw enables exploitation 8.8 — vllm Jan 8 HIGH GHSA-9726-w42j-3qjr picklescan: Path Traversal enables file access — — picklescan Jan 8 MEDI E CVE-2026-21851 monai: Path Traversal enables file access 5.3 0.0% monai Jan 6 HIGH GHSA-46h3-79wf-xr6c picklescan: Code Injection enables RCE — — picklescan Dec 30 HIGH GHSA-955r-x9j8-7rhh picklescan: Code Injection enables RCE — — picklescan Dec 30 MEDI GHSA-6556-fwc2-fg2p picklescan: Code Injection enables RCE — — picklescan Dec 30 HIGH GHSA-rrxm-2pvv-m66x picklescan: Code Injection enables RCE — — picklescan Dec 30 MEDI GHSA-cffc-mxrf-mhh4 picklescan: Code Injection enables RCE — — picklescan Dec 29

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial