AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,604

AI/ML CVEs Tracked

225

Critical

New This Week

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited

Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 225 results — Critical severity

CRITICAL EXPLOIT AVAIL

PyTorch: RCE bypasses weights_only=True safe-load guard

Code Execution Supply Chain Framework Model Inference

pytorch CWE-502 21.7K 6 ATLAS

CRITICAL EXPLOIT AVAIL

jupyter-remote-desktop-proxy: VNC network exposure

CVE-2025-32428

EPSS 0.2%

1y ago

Auth Bypass Data Leakage Privacy Violation Framework

jupyter-remote-desktop-proxy Patch: 3.0.1 CWE-668 1.9K 5 ATLAS

CRITICAL EXPLOIT AVAIL

BentoML: RCE via insecure deserialization in runner

Code Execution Data Extraction Supply Chain Framework Inference

bentoml CWE-502 22 5 ATLAS

CRITICAL KEV SCANNER

Langflow: Unauth RCE via code injection endpoint

Code Execution Auth Bypass Framework Agent

langflow CWE-94 5 ATLAS

CRITICAL EXPLOIT AVAIL

BentoML: unauthenticated RCE via insecure deserialization

Code Execution Supply Chain Framework Inference

bentoml CWE-502 22 5 ATLAS

CRITICAL EXPLOIT AVAIL

InvokeAI: RCE via unsafe torch.load deserialization

Code Execution Supply Chain Framework Model

CWE-502 5 ATLAS

CRITICAL

vLLM: RCE via pickle deserialization in distributed API

Code Execution Supply Chain Framework Inference

vllm CWE-502 126 3 ATLAS

CRITICAL EXPLOIT AVAIL

pytorch-lightning: file upload RCE (Windows)

Code Execution Supply Chain Framework Training Data

pytorch-lightning Patch: 2.4.0 CWE-434 1.6K 4 ATLAS

CRITICAL EXPLOIT AVAIL

llama-index finchat: SQL injection enables RCE

Code Execution Supply Chain Data Extraction Agent Framework Plugin

llama-index-packs-finchat CWE-89 229 5 ATLAS

CRITICAL EXPLOIT AVAIL

llama-index DuckDB retriever: SQLi enables RCE

Code Execution Supply Chain Data Extraction Framework RAG Plugin

llama-index-retrievers-duckdb-retriever Patch: 0.4.0 CWE-89 229 5 ATLAS

CRITICAL EXPLOIT AVAIL

BentoML: unauthenticated RCE via runner deserialization

Code Execution Supply Chain Framework Inference

bentoml CWE-502 22 3 ATLAS

CRITICAL EXPLOIT AVAIL

vllm: RCE via unsafe pickle deserialization in RPC server

Code Execution Supply Chain Framework Inference

vllm CWE-78 126 5 ATLAS

CRITICAL EXPLOIT AVAIL

vllm: RCE via unsafe pickle deserialization in MessageQueue

Code Execution Framework Inference

vllm CWE-502 126 4 ATLAS

CRITICAL EXPLOIT AVAIL

vLLM: RCE via unsafe deserialization in Mooncake KV

Code Execution Supply Chain Framework Inference

vllm CWE-502 126 5 ATLAS

CRITICAL EXPLOIT AVAIL

Keras: safe_mode bypass enables RCE via model loading

Code Execution Supply Chain Framework Model

keras CWE-94 1.5K 6 ATLAS

CRITICAL EXPLOIT AVAIL

picklescan: ZIP flag bypass enables RCE in PyTorch models

Supply Chain Code Execution Model Framework

picklescan CWE-345 3 6 ATLAS

CRITICAL EXPLOIT AVAIL

spacy-llm: SSTI allows unauthenticated RCE (CVSS 9.8)

Code Execution Data Extraction Framework

spacy-llm Patch: 0.7.3 CWE-94 154 4 ATLAS

CRITICAL

JupyterHub LTI13: JWT forgery enables full auth bypass

Auth Bypass Framework

CWE-347 3 ATLAS

CRITICAL

PandasAI: prompt injection enables unauthenticated RCE

Prompt Injection Code Execution Framework Agent

CWE-94 6 ATLAS

CRITICAL EXPLOIT AVAIL

LlamaFactory: RCE via OS command injection in training

Code Execution Supply Chain Framework Training Data

llamafactory Patch: 0.9.1 CWE-78 1 6 ATLAS

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial

AI Security Threat Feed

Weekly CISO Take + top threats

Latest AI Security Threats

Need deeper analysis?