AI Threat Alert AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,625

AI/ML CVEs Tracked

226

Critical

95

New This Week

16

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited
Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 1625 results
Severity CVE ID Summary CVSS EPSS Package Date
LOW E CVE-2026-4993 OpenUI: hard-coded LiteLLM master key credential leak 3.3 0.0% — Mar 28 UNKN CVE-2026-34046 Langflow: IDOR exposes flows and plaintext API keys — 0.0% langflow Mar 27 UNKN CVE-2026-33873 Langflow: server-side RCE via LLM-generated code exec — 0.0% langflow Mar 27 MEDI GHSA-h8r8-wccr-v5f2 DOMPurify: mXSS bypass achieves XSS via parse-context switch — — — Mar 27 HIGH E CVE-2026-34070 langchain-core: path traversal exposes host secrets via prompt config 7.5 0.0% langchain-core Mar 27 HIGH E CVE-2026-33989 @mobilenext/mobile-mcp: path traversal via AI agent tool 8.1 0.0% — Mar 27 MEDI GHSA-364x-8g5j-x2pr n8n: stored XSS via malicious OAuth2 Authorization URL 5.4 — n8n Mar 27 MEDI GHSA-3c7f-5hgj-h279 n8n: Stored XSS in Chat Trigger via CSS injection 5.4 — n8n Mar 27 MEDI GHSA-w673-8fjw-457c n8n: stored XSS enables phishing via Form Node 4.1 — n8n Mar 27 MEDI GHSA-q4fm-pjq6-m63g n8n: Stored XSS in Form Trigger enables phishing 5.4 — n8n Mar 27 MEDI E CVE-2026-4963 smolagents: code injection via incomplete sandbox fix 6.3 0.0% smolagents Mar 27 HIGH E CVE-2025-15381 MLflow: broken access control exposes experiment traces 8.1 0.0% mlflow Mar 27 LOW E CVE-2026-29071 Open WebUI: IDOR exposes AI memories and private files 3.1 0.0% open-webui Mar 27 MEDI E CVE-2026-29070 open-webui: missing authz allows cross-KB file deletion 5.4 0.0% open-webui Mar 27 HIGH E CVE-2026-28788 Open WebUI: BOLA enables RAG poisoning via file overwrite 7.1 0.0% open-webui Mar 27 MEDI E CVE-2026-28786 Open WebUI: path traversal leaks server filesystem path 4.3 0.0% open-webui Mar 27 HIGH E CVE-2026-33744 BentoML: command injection in bentofile.yaml containerize 7.8 0.0% bentoml Mar 27 HIGH CVE-2026-27893 vLLM: trust_remote_code bypass enables RCE 8.8 0.0% vllm Mar 27 MEDI CVE-2026-33682 Streamlit: SSRF leaks NTLMv2 creds via UNC path 4.7 0.0% Streamlit Mar 26 MEDI CVE-2026-33751 n8n: LDAP injection enables auth bypass in workflows 4.8 0.0% n8n Mar 25

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial