AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,604

AI/ML CVEs Tracked

225

Critical

New This Week

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited

Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 225 results — Critical severity

CRITICAL EXPLOIT AVAIL

langchaingo: Jinja2 SSTI allows host filesystem read

Code Execution Data Extraction Framework Agent

5 ATLAS

CRITICAL EXPLOIT AVAIL

n8n-workflows: path traversal in download_workflow endpoint

Data Extraction Auth Bypass Code Execution Agent Framework API

fastapi 16 5 ATLAS

CRITICAL EXPLOIT AVAIL

ExecuTorch: OOB read in model loader enables RCE

Code Execution Supply Chain Framework Model Inference

executorch Patch: 0.7.0 CWE-125 2 4 ATLAS

CRITICAL

ExecuTorch: integer overflow in model load → RCE

Code Execution Supply Chain Framework Model Inference

executorch Patch: 0.7.0 CWE-190 2 4 ATLAS

CRITICAL

ExecuTorch: integer overflow RCE on model load

Code Execution Supply Chain Framework Model Inference

executorch Patch: 0.7.0 CWE-190 2 5 ATLAS

CRITICAL

ExecuTorch: heap buffer overflow RCE via model loading

Code Execution Supply Chain Framework Model

executorch Patch: 0.7.0 CWE-122 2 5 ATLAS

CRITICAL

ExecuTorch: heap buffer overflow RCE in model loading

Code Execution Supply Chain Framework Model Inference

executorch Patch: 0.7.0 CWE-122 2 4 ATLAS

CRITICAL EXPLOIT AVAIL

Azure OpenAI: SSRF EoP, no auth required (CVSS 10)

Auth Bypass Data Extraction Privacy Violation API Inference

azure_openai 13.6K 6 ATLAS

CRITICAL EXPLOIT AVAIL

ChatGLM-Webui: arbitrary file read, no auth required

Data Extraction Auth Bypass Framework API

langchain-chatglm-webui 2.6K 5 ATLAS

CRITICAL EXPLOIT AVAIL

BentoML: unauthenticated SSRF via file upload URLs

Supply Chain Data Extraction Auth Bypass Framework Inference API

bentoml CWE-918 22 5 ATLAS

CRITICAL EXPLOIT AVAIL

LangChain GmailToolkit: indirect prompt injection to RCE

Prompt Injection Code Execution Data Extraction Framework Agent Plugin

6 ATLAS

CRITICAL EXPLOIT AVAIL

smolagents: sandbox escape enables unauthenticated RCE

Code Execution Supply Chain Data Leakage Framework Agent

smolagents CWE-94 86 5 ATLAS

CRITICAL EXPLOIT AVAIL

Langchain-Chatchat: path traversal in KB upload

Code Execution Data Extraction Supply Chain Framework RAG

langchain-chatchat CWE-22 2.6K 5 ATLAS

CRITICAL EXPLOIT AVAIL

LLaMA-Factory: RCE via unsafe checkpoint deserialization

Code Execution Supply Chain Framework Model

llamafactory CWE-94 1 6 ATLAS

CRITICAL EXPLOIT AVAIL

LangChain RequestsToolkit: SSRF exposes cloud metadata

Data Extraction Auth Bypass Framework Agent

langchain CWE-918 2.6K 5 ATLAS

CRITICAL EXPLOIT AVAIL

llama_index: SQL injection in vector store integrations

Data Extraction Data Leakage Supply Chain Framework RAG

llama-index Patch: 0.12.28 CWE-89 229 5 ATLAS

CRITICAL EXPLOIT AVAIL

vLLM: RCE via exposed TCPStore in distributed inference

Code Execution Data Extraction Inference Framework

vllm CWE-502 126 4 ATLAS

CRITICAL EXPLOIT AVAIL

browser-use: URL allowlist bypass enables SSRF in agents

Auth Bypass Data Extraction Agent Framework

browser-use Patch: 0.1.45 CWE-647 65 5 ATLAS

CRITICAL EXPLOIT AVAIL

vLLM: RCE via pickle deserialization on ZeroMQ

Code Execution Supply Chain Inference Framework

vllm CWE-502 126 5 ATLAS

CRITICAL

vLLM: RCE via malicious model, PyTorch < 2.6 bypass

GHSA-ggpf-24jw-3fcw

9.8

1y ago

Code Execution Supply Chain Framework Inference Model

vllm Patch: 0.8.0 CWE-1395 126 5 ATLAS

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial

AI Security Threat Feed

Weekly CISO Take + top threats

Latest AI Security Threats

Need deeper analysis?