AI Security Threat Feed

MLflow: path traversal exposes arbitrary file read/write

MLflow: SSTI enables RCE in ML experiment tracking

MLflow: unauth REST API leaks sensitive ML data

MLflow: unauthenticated arbitrary file write via PUT

Infinite Image Browsing: path traversal leaks credentials

LangChain: prompt injection triggers SSRF via URL fetch

LangChain: SSRF in URL loader exposes internal network

Intel TF Opt: buffer overflow enables local priv-esc

MLflow: OS command injection enables local code execution

LangChain SQLDatabaseChain: SQL injection, DB exfil

MLflow: path traversal exposes arbitrary server files

n8n: unauthenticated info disclosure exposes credentials

n8n: privilege escalation exposes full workflow admin

MLflow: path traversal allows unauthenticated file read

TensorFlow Lite: FPE in tflite model crashes inference runtime

TensorFlow: double-free in pooling ops enables RCE

TensorFlow: NULL ptr deref DoS in ParallelConcat op

TensorFlow XLA: Bincount shape mismatch causes DoS

TensorFlow: null pointer DoS in RandomShuffle (XLA)

TensorFlow: FPE in TensorListSplit (XLA) remote DoS