AI Threat Alert AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,604

AI/ML CVEs Tracked

225

Critical

76

New This Week

16

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited
Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 684 results — High severity
HIGH EXPLOIT AVAIL

Claude Code CLI: OS command injection via TERMINAL env

CVE-2026-35020
8.4
EPSS 0.1%
Code Execution Supply Chain Agent API
claude-code CWE-78 5 ATLAS
HIGH

OpenClaw: PKCE verifier leak enables OAuth token theft

CVE-2026-34511
--
EPSS 0.0%
Auth Bypass Data Extraction Agent API
openclaw Patch: 2026.4.2 CWE-345 4 4 ATLAS
HIGH EXPLOIT AVAIL

mobile-mcp: intent injection enables device control via AI agent

CVE-2026-35394
8.3
EPSS 0.0%
Prompt Injection Code Execution Privacy Violation Agent Plugin
CWE-939 6 ATLAS
HIGH EXPLOIT AVAIL

BentoML: malicious bento archive RCE via Jinja2 SSTI

CVE-2026-35044
8.8
EPSS 0.0%
Supply Chain Code Execution Framework
bentoml Patch: 1.4.38 CWE-1336 23 5 ATLAS
HIGH EXPLOIT AVAIL

BentoML: cmd injection RCE on cloud build infra

CVE-2026-35043
7.8
EPSS 0.0%
Supply Chain Code Execution Framework
bentoml Patch: 1.4.38 CWE-78 23 5 ATLAS
HIGH

oauthenticator: auth bypass enables JupyterHub account takeover

CVE-2026-33175
8.8
EPSS 0.1%
Auth Bypass Framework
CWE-287 4 ATLAS
HIGH

Ajenti: missing authz lets any user install packages

CVE-2026-35175
--
EPSS 0.0%
Auth Bypass Supply Chain Code Execution Framework Plugin
CWE-862 4 ATLAS
HIGH

onnx: TOCTOU symlink following enables arbitrary file write

GHSA-q56x-g2fj-4rj6
7.1
Supply Chain Code Execution Framework Model
onnx Patch: 1.21.0 CWE-22 1.2K 4 ATLAS
HIGH EXPLOIT AVAIL

praisonaiagents: SSRF leaks cloud IAM credentials

CVE-2026-34954
8.6
EPSS 0.0%
Prompt Injection Data Extraction Agent Framework
praisonaiagents Patch: 1.5.95 CWE-918 11 5 ATLAS
HIGH EXPLOIT AVAIL

PraisonAI: sandbox escape via shell=True blocklist bypass

CVE-2026-34955
8.8
EPSS 0.0%
Code Execution Prompt Injection Auth Bypass Agent Framework Plugin
praisonai Patch: 4.5.97 CWE-78 1 6 ATLAS 1 incident
HIGH EXPLOIT AVAIL

PraisonAI: SSRF via api_base steals cloud IAM credentials

CVE-2026-34936
7.7
EPSS 0.0%
Data Extraction Auth Bypass Supply Chain Framework API Agent
praisonai Patch: 4.5.90 CWE-918 1 5 ATLAS
HIGH EXPLOIT AVAIL

PraisonAI: OS command injection via run_python() shell escape

CVE-2026-34937
7.8
EPSS 0.0%
Code Execution Prompt Injection Auth Bypass Agent Framework Plugin
praisonaiagents Patch: 1.5.90 CWE-78 11 6 ATLAS 1 incident
HIGH EXPLOIT AVAIL

Open WebUI: access control bypass leaks Tool Valve API keys

CVE-2026-34222
7.7
EPSS 0.0%
Auth Bypass Data Extraction Agent Plugin Framework
open-webui Patch: 0.8.11 CWE-285 5 ATLAS
HIGH

ONNX: property overwrite via crafted model file

CVE-2026-34445
8.6
EPSS 0.2%
Supply Chain DoS Code Execution Framework Model Inference
onnx Patch: 1.21.0 CWE-20 1.2K 5 ATLAS
HIGH

OpenClaw: .npmrc hijack enables RCE on plugin install

GHSA-m3mh-3mpg-37hw
8.6
Code Execution Supply Chain Framework Plugin Agent
openclaw Patch: 2026.3.24 CWE-426 4 4 ATLAS 3 incidents
HIGH

OpenClaw: sandbox escape via mediaUrl path traversal

GHSA-hr5v-j9h9-xjhg
7.7
Data Extraction Auth Bypass Agent Plugin Framework
openclaw Patch: 2026.3.24 CWE-22 4 5 ATLAS 2 incidents
HIGH EXPLOIT AVAIL

awesome-llm-apps MCP Agent: cross-session credential theft

CVE-2026-29872
8.2
EPSS 0.1%
Data Leakage Auth Bypass Privacy Violation Agent API Plugin
7 ATLAS
HIGH

openclaw: SSRF in channel extensions hits internal network

CVE-2026-35629
--
EPSS 0.0%
Data Extraction Auth Bypass Supply Chain Agent Plugin
openclaw Patch: 2026.3.28 CWE-918 4 4 ATLAS 1 incident
HIGH EXPLOIT AVAIL

langchain-core: path traversal exposes host secrets via prompt config

CVE-2026-34070
7.5
EPSS 0.0%
Data Extraction Data Leakage Framework
langchain-core Patch: 1.2.22 CWE-22 4.4K 5 ATLAS
HIGH EXPLOIT AVAIL

@mobilenext/mobile-mcp: path traversal via AI agent tool

CVE-2026-33989
8.1
EPSS 0.0%
Prompt Injection Code Execution Supply Chain Agent Plugin
CWE-22 6 ATLAS

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial