AI Security Threat Feed

Code Execution Supply Chain Data Extraction Framework Training Data

MLflow: XSS in recipes enables client-side RCE

Code Execution Supply Chain Framework Training Data

MEDIUM

Intel TF Opt: buffer overflow enables local privesc

optimization_for_tensorflow CWE-119 3.7K 3 ATLAS

Data Extraction Data Leakage Auth Bypass Framework Inference API

Gradio: unauthenticated LFI exposes full server filesystem

gradio CWE-22 679 5 ATLAS

Code Execution Data Extraction Prompt Injection Framework Agent

LlamaIndex: SQL injection in Text-to-SQL feature

llamaindex CWE-89 5 ATLAS

Data Extraction Privacy Violation Framework Inference

Gradio: path traversal grants arbitrary file read

gradio 679 5 ATLAS

Supply Chain Code Execution Framework Model

Transformers: unsafe deserialization enables RCE on load

transformers 7.9K 5 ATLAS

Supply Chain Code Execution Framework Model

HuggingFace Transformers: RCE via unsafe deserialization

transformers CWE-502 7.9K 5 ATLAS

Data Extraction Framework

MLflow: path traversal exposes arbitrary files (no auth)

mlflow 624 4 ATLAS

Supply Chain Code Execution Framework Training Data

MLflow: path traversal allows arbitrary file write

mlflow CWE-22 624 4 ATLAS

Code Execution Data Extraction Supply Chain Framework Inference API

Gradio: command injection enables RCE on ML servers

gradio 679 5 ATLAS

Data Extraction Code Execution Supply Chain Framework Training Data Model

MLflow: path traversal exposes arbitrary file read/write

Code Execution Supply Chain Data Extraction Framework Training Data

MLflow: SSTI enables RCE in ML experiment tracking

MEDIUM EXPLOIT AVAIL SCANNER

MLflow: reflected XSS via Content-Type header injection

Auth Bypass Data Extraction Framework

mlflow CWE-79 624 4 ATLAS

Data Extraction Data Leakage Auth Bypass Framework API Training Data

MLflow: unauth REST API leaks sensitive ML data

Code Execution Auth Bypass Framework Training Data Inference

CRITICAL KEV SCANNER

Ray: unauthenticated RCE via job submission API

ray CWE-829 847 6 ATLAS

MEDIUM

TorchServe: ZipSlip arbitrary file write via model upload

Supply Chain Code Execution Framework Inference

torchserve 21.9K 4 ATLAS

CRITICAL EXPLOIT AVAIL SCANNER

Ray: unauthenticated LFI exposes entire filesystem

Data Extraction Auth Bypass Framework Training Data Model

ray Patch: 2.8.1 CWE-598 847 5 ATLAS

Auth Bypass Data Extraction Supply Chain Framework Training Data Model

MLflow: auth bypass allows arbitrary account creation

mlflow 624 6 ATLAS