AI Threat Alert AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,616

AI/ML CVEs Tracked

226

Critical

87

New This Week

16

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited
Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 1616 results
Severity CVE ID Summary CVSS EPSS Package Date
MEDI E CVE-2025-6208 llama-index-core: DoS causes service disruption 5.3 0.0% llama-index-core Feb 2 HIGH E CVE-2026-0599 text-generation: DoS causes service disruption 7.5 0.3% — Feb 2 HIGH E CVE-2025-10279 mlflow: security flaw enables exploitation 7.0 0.0% mlflow Feb 2 CRIT E CVE-2026-25130 cai-framework: Command Injection enables RCE 9.7 0.0% — Jan 30 LOW CVE-2026-25211 llama-stack: security flaw enables exploitation 3.2 0.0% — Jan 30 HIGH E CVE-2026-24780 agpt: Code Injection enables RCE 8.8 0.1% — Jan 29 MEDI GHSA-gpx9-96j6-pp87 agentos-taskweaver: Protection Bypass circumvents security controls 6.5 — — Jan 28 HIGH E CVE-2026-24779 vllm: SSRF allows internal network access 7.1 0.0% vllm Jan 27 HIGH E CVE-2026-24747 pytorch: Code Injection enables RCE 8.8 0.1% pytorch Jan 27 CRIT E CVE-2026-1470 n8n: Code Injection enables RCE 9.9 1.9% n8n Jan 27 MEDI E CVE-2026-24123 bentoml: Path Traversal enables file access 6.5 0.0% bentoml Jan 26 CRIT E CVE-2025-13374 Kalrav: Arbitrary File Upload enables RCE 9.8 0.1% — Jan 24 UNKN CVE-2026-0772 langflow: Deserialization enables RCE — 0.9% langflow Jan 23 UNKN CVE-2026-0771 langflow: Code Injection enables RCE — 0.1% langflow Jan 23 HIGH CVE-2026-0770 langflow: security flaw enables exploitation — 11.9% langflow Jan 23 UNKN CVE-2026-0769 langflow: Code Injection enables RCE — 1.9% langflow Jan 23 UNKN CVE-2026-0768 langflow: Code Injection enables RCE — 1.9% langflow Jan 23 UNKN CVE-2025-15063 Ollama: Command Injection enables RCE — 0.8% — Jan 23 HIGH E CVE-2025-65098 typebot: XSS enables session hijacking 7.4 0.0% — Jan 22 CRIT CVE-2026-22807 vllm: Code Injection enables RCE 9.8 0.0% vllm Jan 21

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial