AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems — LLM frameworks, ML libraries, AI agents, vector databases, and inference servers. Vulnerabilities are tracked from NVD, GitHub Advisory, CISA KEV, MITRE ATLAS, and enriched with CVSS, EPSS, exploitation confidence, AI-component classification, and compliance mappings to ISO 42001, EU AI Act, NIST AI RMF, and OWASP LLM Top 10. Updated continuously as new CVEs are published.

Sources
Each CVE is enriched with
  • CVSS severity
  • EPSS exploit probability
  • Exploitation confidence
  • AI-component classification
  • Compliance mappings
4,307

AI/ML CVEs Tracked

533

Critical

96

New This Week

25

In CISA KEV

Sort:DateCVSSEPSSKEV firstMost exploited
Filter:AllCriticalHighMediumKEV onlyActive exploitationHas patchNo patch

Latest AI Security Threats

Showing 20 of 169 results — Critical severity, has patch
CRITICAL

picklescan: security flaw enables exploitation

GHSA-vvpj-8cmc-gx39
10.0
Supply ChainCode ExecutionAuth BypassModelFramework
picklescanPatch: 1.0.4CWE-18338 ATLAS
CRITICAL

picklescan: Allowlist Bypass evades input filtering

GHSA-7wx9-6375-f5wh
9.8
Supply ChainCode ExecutionFramework
picklescanPatch: 1.0.4CWE-18435 ATLAS
CRITICAL

mlflow: security flaw enables exploitation

CVE-2026-2635
9.8
EPSS 1.1%
Model PoisoningCode ExecutionAuth BypassFrameworkRAGModel
mlflowPatch: 3.8.0rc0CWE-139369510 ATLAS
CRITICAL

semantic-kernel: Code Injection enables RCE

CVE-2026-26030
10.0
EPSS 3.9%
Code ExecutionSupply ChainAuth BypassFrameworkAgentRAG
semantic-kernelPatch: 1.39.4CWE-94245 ATLAS
CRITICAL

semantic-kernel: Path Traversal enables file access

CVE-2026-25592
9.9
EPSS 2.5%
Code ExecutionSupply ChainData ExtractionFrameworkAgentPlugin
semantic-kernelPatch: 1.39.3CWE-22246 ATLAS
CRITICALEXPLOIT AVAIL

langroid: Code Injection enables RCE

CVE-2026-25481
--
EPSS 0.7%
Code ExecutionPrompt InjectionAuth BypassAgentFrameworkPlugin
langroidPatch: 0.59.32CWE-9446 ATLAS
CRITICALKEVSCANNER

ray: Code Injection enables RCE

CVE-2025-62593
--
EPSS 60.2%
Code ExecutionAuth BypassSocial EngineeringFramework
rayPatch: 2.52.0CWE-946428 ATLAS
CRITICALEXPLOIT AVAIL

keras: Path Traversal enables file access

CVE-2025-12060
9.8
EPSS 0.6%
Supply ChainCode ExecutionFrameworkTraining Data
kerasPatch: 3.12.0CWE-224.1K4 ATLAS
CRITICALEXPLOIT AVAIL

keras: Deserialization enables RCE

CVE-2025-49655
9.8
EPSS 0.8%
Code ExecutionSupply ChainFrameworkModel
kerasPatch: 3.11.3CWE-5024.1K5 ATLAS
CRITICAL

ExecuTorch: integer overflow in model load → RCE

CVE-2025-30405
9.8
EPSS 0.6%
Code ExecutionSupply ChainFrameworkModelInference
executorchPatch: 0.7.0CWE-19074 ATLAS
CRITICAL

ExecuTorch: integer overflow RCE on model load

CVE-2025-30404
9.8
EPSS 0.6%
Code ExecutionSupply ChainFrameworkModelInference
executorchPatch: 0.7.0CWE-19075 ATLAS
CRITICALEXPLOIT AVAIL

ExecuTorch: OOB read in model loader enables RCE

CVE-2025-54950
9.8
EPSS 0.6%
Code ExecutionSupply ChainFrameworkModelInference
executorchPatch: 0.7.0CWE-12574 ATLAS
CRITICAL

ExecuTorch: heap buffer overflow RCE in model loading

CVE-2025-54951
9.8
EPSS 0.7%
Code ExecutionSupply ChainFrameworkModelInference
executorchPatch: 0.7.0CWE-12274 ATLAS
CRITICAL

ExecuTorch: heap buffer overflow RCE via model loading

CVE-2025-54949
9.8
EPSS 0.7%
Code ExecutionSupply ChainFrameworkModel
executorchPatch: 0.7.0CWE-12275 ATLAS
CRITICALEXPLOIT AVAIL

llama_index: SQL injection in vector store integrations

CVE-2025-1793
9.8
EPSS 0.7%
Data ExtractionData LeakageSupply ChainFrameworkRAG
llama-indexPatch: 0.12.28CWE-892515 ATLAS
CRITICALEXPLOIT AVAIL

browser-use: URL allowlist bypass enables SSRF in agents

CVE-2025-47241
9.3
EPSS 0.5%
Auth BypassData ExtractionAgentFramework
browser-usePatch: 0.1.45CWE-647755 ATLAS
CRITICAL

vLLM: RCE via malicious model, PyTorch < 2.6 bypass

GHSA-ggpf-24jw-3fcw
9.8
Code ExecutionSupply ChainFrameworkInferenceModel
vllmPatch: 0.8.0CWE-1395945 ATLAS
CRITICALEXPLOIT AVAIL

jupyter-remote-desktop-proxy: VNC network exposure

CVE-2025-32428
--
EPSS 0.9%
Auth BypassData LeakagePrivacy ViolationFramework
jupyter-remote-desktop-proxyPatch: 3.0.1CWE-6681.9K5 ATLAS
CRITICALEXPLOIT AVAIL

InvokeAI: RCE via unsafe torch.load deserialization

CVE-2024-12029
9.8
EPSS 6.0%
Code ExecutionSupply ChainFrameworkModel
InvokeAIPatch: 5.4.3rc2CWE-5025 ATLAS
CRITICALEXPLOIT AVAIL

pytorch-lightning: file upload RCE (Windows)

CVE-2024-8019
9.1
EPSS 1.1%
Code ExecutionSupply ChainFrameworkTraining Data
pytorch-lightningPatch: 2.4.0CWE-4341.7K4 ATLAS

Frequently asked questions

What is an AI security threat feed?

An AI security threat feed is a continuously updated stream of vulnerabilities (CVEs) affecting AI and machine-learning systems — LLM frameworks, ML libraries, AI agents, vector databases, and inference servers — filtered out of the broader CVE firehose and enriched for relevance.

Which sources are the AI CVEs tracked from?

CVEs are tracked from NVD, GitHub Advisory, CISA KEV, and MITRE ATLAS, then enriched with CVSS, EPSS, exploitation confidence, AI-component classification, and compliance mappings.

What AI systems do these vulnerabilities affect?

Coverage spans LLM frameworks, ML libraries, AI agents, vector databases, and inference servers — the components most security teams now run in production.

How often is the AI threat feed updated?

The feed updates continuously as new CVEs are published and enriched, so the most recent AI/ML vulnerabilities appear at the top.

Is the AI security feed free?

Yes — the public feed is free to browse. A Pro subscription adds breaking alerts, MITRE ATLAS mappings, compliance reports (ISO 42001, EU AI Act), and full CISO analysis.

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial