AI Security Threat Feed

anthropic-ai/sdk: memory tool path traversal escape

CVE-2026-34451

Prompt Injection Data Extraction Code Execution Framework Agent API

@anthropic-ai/sdk Patch: 0.81.0 CWE-22 240 6 ATLAS

anthropic-sdk: insecure file perms expose agent memory

CVE-2026-34450

Data Leakage Model Poisoning Data Extraction Agent Framework API

anthropic Patch: 0.87.0 CWE-276 4.8K 4 ATLAS 17 incidents

Claude Setup: DLL search-order hijacking LPE

CVE-2026-22561

Code Execution Supply Chain API Framework

3 ATLAS

CRITICAL EXPLOIT AVAIL

MLflow: command injection via model_uri in mlserver mode

Code Execution Supply Chain Framework Inference

CWE-78 4 ATLAS 1 incident

1millionbot Millie: Boolean prompt injection bypasses restrictions

CVE-2026-4399

Prompt Injection Jailbreak API Agent

6 ATLAS 3 incidents

CRITICAL

telnyx: PyPI supply chain attack steals cloud creds

GHSA-955r-262c-33jc

Supply Chain Code Execution Data Extraction Framework API Agent

CWE-506 7 ATLAS 2 incidents

HIGH

OpenClaw: .npmrc hijack enables RCE on plugin install

GHSA-m3mh-3mpg-37hw

8.6

Code Execution Supply Chain Framework Plugin Agent

openclaw Patch: 2026.3.24 CWE-426 4 4 ATLAS 3 incidents

OpenClaw: HTTP scope bypass enables model enumeration

GHSA-68f8-9mhj-h2mp

Auth Bypass Data Extraction API Inference

openclaw Patch: 2026.3.24 CWE-284 4 4 ATLAS 2 incidents

HIGH

OpenClaw: sandbox escape via mediaUrl path traversal

GHSA-hr5v-j9h9-xjhg

7.7

Data Extraction Auth Bypass Agent Plugin Framework

openclaw Patch: 2026.3.24 CWE-22 4 5 ATLAS 2 incidents

HIGH EXPLOIT AVAIL

awesome-llm-apps MCP Agent: cross-session credential theft

Data Leakage Auth Bypass Privacy Violation Agent API Plugin

7 ATLAS

CrewAI: Docker sandbox fallback enables RCE

CVE-2026-2287

Code Execution Auth Bypass Supply Chain Agent Framework Plugin

5 ATLAS 1 incident

CrewAI: SSRF via unvalidated RAG tool URLs exposes internal services

CVE-2026-2286

Data Extraction Auth Bypass Privacy Violation Agent RAG Framework

5 ATLAS

CrewAI: arbitrary file read via JSON loader tool

CVE-2026-2285

EPSS 0.2%

Data Extraction Data Leakage Prompt Injection Framework Agent Plugin

6 ATLAS

UNKNOWN EXPLOIT AVAIL

CrewAI: RCE via Docker fallback in CodeInterpreter

CVE-2026-2275

Code Execution Auth Bypass Agent Framework Plugin

6 ATLAS 1 incident

CRITICAL EXPLOIT AVAIL

MLflow: RCE via unsanitized model dependency specs

Code Execution Supply Chain Framework

mlflow Patch: 3.8.1 CWE-77 624 4 ATLAS 1 incident

CRITICAL EXPLOIT AVAIL

MLflow: path traversal enables sandbox escape, file overwrite

Supply Chain Code Execution Framework

mlflow Patch: 3.9.0rc0 CWE-29 624 5 ATLAS

openclaw: webhook rate-limit bypass enables token brute-force

CVE-2026-35646

Auth Bypass Data Extraction Agent Plugin

openclaw Patch: 2026.3.28 CWE-307 4 4 ATLAS 1 incident

openclaw Patch: 2026.3.28 CWE-400 4 3 ATLAS

openclaw: unauthenticated webhook parsing enables DoS

HIGH

openclaw: SSRF in channel extensions hits internal network

CVE-2026-35629

Data Extraction Auth Bypass Supply Chain Agent Plugin

openclaw Patch: 2026.3.28 CWE-918 4 4 ATLAS 1 incident

openclaw: auth bypass exposes agent session history via HTTP

CVE-2026-35657