AI Security Threat Feed

Data Extraction Auth Bypass Plugin API

MEDIUM

AI component: SQL Injection exposes database

Code Execution Auth Bypass Social Engineering Inference API Plugin

open-webui: Code Injection enables RCE

open-webui Patch: 0.6.35 CWE-95 9 ATLAS

Code Execution Data Extraction Auth Bypass Framework Agent API

Open WebUI: XSS-to-RCE via malicious prompt injection

open-webui Patch: 0.6.35 CWE-79 7 ATLAS

MEDIUM

Better: security flaw enables exploitation

Auth Bypass DoS API Plugin

6 ATLAS

langgraph-checkpoint: Deserialization enables RCE

CVE-2025-64439

EPSS 1.1%

Code Execution Supply Chain Framework Agent

langgraph-checkpoint Patch: 3.0.0 CWE-502 3.1K 5 ATLAS

Data Extraction Code Execution Framework Agent

dspy: security flaw enables exploitation

CWE-653 5 ATLAS

HIGH

n8n: security flaw enables exploitation

Code Execution Supply Chain Data Extraction Agent Framework Plugin

n8n 16 6 ATLAS

CRITICAL EXPLOIT AVAIL

keras: Path Traversal enables file access

Supply Chain Code Execution Framework Training Data

keras Patch: 3.12.0 CWE-22 1.5K 4 ATLAS

LOW EXPLOIT AVAIL

pdf2zh: security flaw enables exploitation

CVE-2025-50736

EPSS 0.0%

Social Engineering Auth Bypass API Framework

CWE-601 4 ATLAS

Auth Bypass Data Extraction Data Leakage Framework Agent

langgraph-checkpoint-sqlite: SQL Injection exposes database

langgraph-checkpoint-sqlite Patch: 2.0.11 CWE-89 3.1K 4 ATLAS

UNKNOWN

LiteLLM: Info Disclosure leaks sensitive data

CVE-2025-11203

EPSS 0.1%

Data Leakage Data Extraction Auth Bypass API Framework Inference

Code Execution Auth Bypass Framework

CRITICAL EXPLOIT AVAIL

mlflow: Path Traversal enables file access

mlflow CWE-22 624 6 ATLAS

CRITICAL

mlflow: security flaw enables exploitation

Auth Bypass Data Extraction Supply Chain Framework Model Training Data

mlflow CWE-521 624 6 ATLAS

Keras: safe_mode bypass enables file read and SSRF

CVE-2025-12058

EPSS 0.1%

Data Extraction Supply Chain Code Execution Framework Model

keras Patch: 3.12.0 CWE-502 1.5K 5 ATLAS

Data Extraction Auth Bypass Data Leakage Framework Agent

langgraph-checkpoint-sqlite: SQL Injection exposes database

langgraph-checkpoint-sqlite Patch: 2.0.11 CWE-89 3.1K 5 ATLAS

Data Extraction Auth Bypass Agent Framework Plugin

smolagents: security flaw enables exploitation

smolagents CWE-643 88 4 ATLAS

Auth Bypass Data Leakage Data Extraction Plugin API

Moodle: IDOR enables unauthorized data access