AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,604

AI/ML CVEs Tracked

225

Critical

76

New This Week

16

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited

Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 1604 results

CRITICAL EXPLOIT AVAIL SCANNER

langflow: Missing Auth allows unauthenticated access

CVE-2026-21445

Auth Bypass Data Extraction Privacy Violation Framework Agent API

langflow CWE-306 7 ATLAS

picklescan: Code Injection enables RCE

GHSA-46h3-79wf-xr6c

Supply Chain Code Execution Framework Model

picklescan Patch: 0.0.34 CWE-94 3 7 ATLAS

picklescan: Code Injection enables RCE

GHSA-955r-x9j8-7rhh

Supply Chain Code Execution Framework Model

picklescan Patch: 0.0.34 CWE-94 3 6 ATLAS

picklescan: Code Injection enables RCE

GHSA-6556-fwc2-fg2p

Supply Chain Code Execution Framework Model

picklescan Patch: 0.0.33 CWE-94 3 6 ATLAS

picklescan: Code Injection enables RCE

GHSA-rrxm-2pvv-m66x

Supply Chain Code Execution Model Framework

picklescan Patch: 0.0.33 CWE-94 3 7 ATLAS

picklescan: Code Injection enables RCE

GHSA-cffc-mxrf-mhh4

Supply Chain Code Execution Framework Model

picklescan Patch: 0.0.33 CWE-94 3 5 ATLAS

picklescan: Code Injection enables RCE

GHSA-3329-ghmp-jmv5

Supply Chain Code Execution Framework Model

picklescan Patch: 0.0.33 CWE-94 3 5 ATLAS

picklescan: Code Injection enables RCE

GHSA-x843-g5mx-g377

Supply Chain Code Execution Framework Model

picklescan Patch: 0.0.33 CWE-94 3 6 ATLAS

picklescan: Deserialization enables RCE

GHSA-r8g5-cgf2-4m4m

Supply Chain Code Execution Framework Model

picklescan Patch: 0.0.33 CWE-502 3 5 ATLAS

picklescan: Protection Bypass circumvents security controls

GHSA-hgrh-qx5j-jfwx

Supply Chain Code Execution Model Framework

picklescan Patch: 0.0.33 CWE-693 3 7 ATLAS

picklescan: Deserialization enables RCE

GHSA-vqmv-47xg-9wpr

Supply Chain Code Execution Model Framework

picklescan Patch: 0.0.33 CWE-502 3 7 ATLAS

picklescan: Allowlist Bypass evades input filtering

GHSA-84r2-jw7c-4r5q

Supply Chain Code Execution Framework Model

picklescan Patch: 0.0.33 CWE-184 3 5 ATLAS

picklescan: Allowlist Bypass evades input filtering

GHSA-4675-36f9-wf6r

Code Execution Supply Chain Auth Bypass Framework Model

picklescan Patch: 0.0.33 CWE-184 3 6 ATLAS

picklescan: Deserialization enables RCE

GHSA-m273-6v24-x4m4

Supply Chain Code Execution Framework Model

picklescan Patch: 0.0.33 CWE-502 3 5 ATLAS

n8n: security flaw enables exploitation

CVE-2025-68697

Code Execution Data Extraction Data Leakage Agent Framework

n8n CWE-269 16 7 ATLAS

CRITICAL EXPLOIT AVAIL

n8n: Protection Bypass circumvents security controls

CVE-2025-68668

Code Execution Auth Bypass Agent Framework Plugin

n8n: XSS enables session hijacking

CVE-2025-61914

Code Execution Auth Bypass Data Extraction Agent Framework Plugin

n8n CWE-79 16 6 ATLAS

HIGH EXPLOIT AVAIL

lmdeploy: Deserialization enables RCE

CVE-2025-67729

Supply Chain Code Execution Framework Model Inference

CWE-502 6 ATLAS

CRITICAL EXPLOIT AVAIL

langchain.js: Deserialization enables RCE

CVE-2025-68665

Supply Chain Code Execution Data Extraction Framework Agent

langchain.js 2.6K 5 ATLAS

HIGH EXPLOIT AVAIL

langchain-core: Deserialization enables RCE

CVE-2025-68664

Supply Chain Code Execution Data Extraction Framework Agent

langchain_core CWE-502 2.6K 6 ATLAS

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial