AI Security Threat Feed

Data Extraction Auth Bypass Framework Training Data

MLflow: path traversal via ';' smuggling exposes files

mlflow 655 4 ATLAS

UNKNOWN KEV SCANNER

Gradio: path traversal enables arbitrary file read

CVE-2024-1561

EPSS 9.2%

Data Extraction Data Leakage Framework API

gradio 685 5 ATLAS

Supply Chain DoS Auth Bypass Framework Training Data

MLflow: path traversal allows arbitrary directory deletion

mlflow 655 3 ATLAS

Data Extraction Data Leakage Framework

MLflow: path traversal enables arbitrary file read

mlflow 655 5 ATLAS

HIGH EXPLOIT AVAIL SCANNER

MLflow: path traversal exposes arbitrary server files

Data Extraction Auth Bypass Framework Training Data

mlflow 655 5 ATLAS

UNKNOWN EXPLOIT AVAIL SCANNER

Gradio: SSRF enables internal network port scanning

CVE-2024-1183

EPSS 1.8%

Data Extraction Privacy Violation Framework Inference

gradio 685 3 ATLAS

MEDIUM

stable-diffusion-webui: path traversal file write

Code Execution Framework Inference

3 ATLAS

Code Execution Supply Chain Framework Model

HuggingFace Transformers: RCE via pickle deserialization

transformers 8.3K 5 ATLAS

HIGH EXPLOIT AVAIL SCANNER

Gradio: path traversal leaks arbitrary files, potential RCE

Data Extraction Code Execution Privacy Violation Framework API Inference

gradio 685 6 ATLAS

MEDIUM EXPLOIT AVAIL

Ollama: DNS rebinding exposes LLM API to remote access

Auth Bypass DoS Data Extraction Inference API Model

ollama 1.6K 4 ATLAS

Code Execution Data Extraction Framework API

gpt_academic: deserialization RCE, no auth required

gpt_academic 5 ATLAS

UNKNOWN EXPLOIT AVAIL

Gradio: timing attack enables auth bypass on ML UIs

CVE-2024-1729

EPSS 0.5%

Auth Bypass Framework Inference

gradio 685 4 ATLAS

Code Execution Supply Chain Framework

Gradio: CI/CD command injection enables secrets exfil

gradio 685 4 ATLAS

MEDIUM EXPLOIT AVAIL

Gradio: SSRF exposes internal HuggingFace endpoints

Data Extraction Auth Bypass Framework Inference API

gradio 685 4 ATLAS

MEDIUM EXPLOIT AVAIL

LangChain: Billion Laughs XML expansion causes DoS

langchain 2.7K 4 ATLAS

UNKNOWN EXPLOIT AVAIL

Gradio: CSRF enables disk exhaustion via file upload DoS

CVE-2024-1727

EPSS 0.4%

DoS Auth Bypass Framework

gradio 685 3 ATLAS

Code Execution Data Leakage Supply Chain Framework Agent API

LangChain: path traversal enables RCE and API key theft

langchain CWE-22 2.7K 6 ATLAS

Code Execution Data Extraction Framework RAG

LangChain TFIDFRetriever: SSRF/RCE via load_local

langchain 2.7K 5 ATLAS

Code Execution Supply Chain Framework Agent

LangChain Experimental: RCE via Python sandbox escape

langchain-experimental 2.7K 4 ATLAS