AI Security Threat Feed

Data Extraction Data Leakage Framework RAG

LlamaIndex Obsidian: symlink traversal exposes host files

llama-index-readers-obsidian Patch: 0.5.1 CWE-22 229 4 ATLAS

MEDIUM EXPLOIT AVAIL

llama-index ArxivReader: MD5 collision corrupts training data

Supply Chain Model Poisoning Data Leakage Framework Training Data RAG

llama-index-readers-papers Patch: 0.3.1 CWE-440 229 5 ATLAS

DoS Supply Chain Framework RAG

llama-index Papers Loader: XML expansion DoS

llama-index-readers-papers Patch: 0.3.2 CWE-776 229 3 ATLAS

MEDIUM EXPLOIT AVAIL

llama-index: RCE via unsafe pickle deserialization

Code Execution Supply Chain Framework RAG Agent

llama-index-core Patch: 0.12.41 CWE-1112 1.1K 4 ATLAS

Auth Bypass Data Extraction Framework API

MLflow: unauthenticated SSRF in gateway proxy

mlflow Patch: 3.1.0 CWE-918 624 4 ATLAS

CRITICAL EXPLOIT AVAIL

llama_index: SQL injection in vector store integrations

Data Extraction Data Leakage Supply Chain Framework RAG

llama-index Patch: 0.12.28 CWE-89 229 5 ATLAS

vllm Patch: 0.9.0 CWE-1333 126 3 ATLAS

vllm: ReDoS in inference endpoints enables DoS

GHSA-j828-28rj-hfhp

4.3

11mo ago

DoS Inference Framework

Code Execution Data Leakage Social Engineering Framework Training Data

Label Studio: XSS enables unauthorized actions via CSRF

CVE-2025-47783

EPSS 0.2%

11mo ago

label-studio Patch: 1.18.0 CWE-79 1 5 ATLAS

llama-index Patch: 0.12.21 CWE-400 229 3 ATLAS

llama_index: DoS via uncapped recursion in web reader

CRITICAL EXPLOIT AVAIL

browser-use: URL allowlist bypass enables SSRF in agents

Auth Bypass Data Extraction Agent Framework

browser-use Patch: 0.1.45 CWE-647 65 5 ATLAS

Code Execution Supply Chain Framework Training Data

LLaMA-Factory: RCE via torch.load() unsafe deserialization

llamafactory Patch: 0.9.3 CWE-502 1 5 ATLAS

CRITICAL

vLLM: RCE via malicious model, PyTorch < 2.6 bypass

GHSA-ggpf-24jw-3fcw

9.8

Code Execution Supply Chain Framework Inference Model

vllm Patch: 0.8.0 CWE-1395 126 5 ATLAS

vLLM: DoS via unbounded XGrammar schema cache

GHSA-hf3c-wxg2-49q9

6.5

DoS Supply Chain Inference Framework API

vllm Patch: 0.8.4 CWE-770 126 5 ATLAS

CRITICAL EXPLOIT AVAIL

jupyter-remote-desktop-proxy: VNC network exposure

CVE-2025-32428

EPSS 0.2%

Auth Bypass Data Leakage Privacy Violation Framework

jupyter-remote-desktop-proxy Patch: 3.0.1 CWE-668 1.9K 5 ATLAS

xgrammar Patch: 0.1.18 CWE-770 152 3 ATLAS

xgrammar: unbounded grammar cache causes LLM server DoS

DoS Inference Framework

picklescan: bypass allows silent RCE in ML pipelines

GHSA-v7x6-rv5q-mhwc

Supply Chain Code Execution Model Framework

picklescan Patch: 0.0.25 CWE-184 3 6 ATLAS

picklescan: numpy bypass enables RCE in ML model pipelines

GHSA-fj43-3qmq-673f

Supply Chain Code Execution Framework Model

picklescan Patch: 0.0.25 CWE-502 3 7 ATLAS

picklescan: scanner bypass enables DNS data exfiltration

CVE-2025-46417

EPSS 0.2%

Supply Chain Data Extraction Data Leakage Framework Model

picklescan Patch: 0.0.25 CWE-184 3 6 ATLAS