AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems — LLM frameworks, ML libraries, AI agents, vector databases, and inference servers. Vulnerabilities are tracked from NVD, GitHub Advisory, CISA KEV, MITRE ATLAS, and enriched with CVSS, EPSS, exploitation confidence, AI-component classification, and compliance mappings to ISO 42001, EU AI Act, NIST AI RMF, and OWASP LLM Top 10. Updated continuously as new CVEs are published.

Sources

Each CVE is enriched with

CVSS severity
EPSS exploit probability
Exploitation confidence
AI-component classification
Compliance mappings

3,590

AI/ML CVEs Tracked

481

Critical

95

New This Week

24

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited

Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 481 results — Critical severity

CRITICAL EXPLOIT AVAIL

jupyterlab-git: stored XSS escalates to full RCE

CVE-2026-54527

Code Execution Data Extraction Auth Bypass Plugin Framework

@jupyterlab/git Patch: 0.54.0 CWE-79 1.9K 6 ATLAS

pgAdmin 4: Stored XSS enables full browser session hijack

CVE-2026-12048

Code Execution Data Extraction Social Engineering Framework RAG

jupyter-server: stored XSS yields kernel RCE

CVE-2026-44727

Code Execution Data Extraction Auth Bypass Framework Inference

notebook CWE-79 3.1K 6 ATLAS

praisonai-platform: hardcoded JWT secret enables full auth bypass

GHSA-cwj8-7gp2-ggcw

Auth Bypass Supply Chain Agent Framework

praisonai-platform Patch: 0.1.6 CWE-798 1 4 ATLAS

praisonai-platform: hardcoded JWT secret enables full auth bypass

GHSA-f38v-77qj-h4jq

Auth Bypass Agent Framework

praisonai-platform Patch: 0.1.6 CWE-287 1 5 ATLAS

PraisonAI: multiedit path traversal, arbitrary file R/W

GHSA-29w3-p9w9-wc47

Data Extraction Code Execution Privacy Violation Agent Plugin

praisonai Patch: 4.6.61 CWE-22 1 7 ATLAS

praisonai: MCP HTTP server unauthenticated tool invocation

GHSA-j4f3-55x4-r6q2

Auth Bypass Code Execution Data Extraction Agent Framework API

praisonai Patch: 1.7.2 CWE-306 1 6 ATLAS

praisonai npm: AgentOS missing auth enables agent abuse

GHSA-9752-mhqh-h34f

Auth Bypass Data Extraction Code Execution Agent Framework API

praisonai Patch: 1.7.2 CWE-306 1 6 ATLAS

praisonai: sandbox escape in codeMode → full host RCE

GHSA-p69m-4f92-2v84

Code Execution Prompt Injection Data Extraction Agent Framework Plugin

praisonai Patch: 1.7.2 CWE-94 1 6 ATLAS

praisonai: sandbox escape gives RCE via codeMode tool

GHSA-vmmj-pfw7-fjwp

Code Execution Supply Chain Prompt Injection Agent Plugin

praisonai Patch: 1.7.2 CWE-184 1 5 ATLAS

PraisonAI: unauthenticated RCE via MCP connect endpoint

GHSA-p75f-6fp4-p57w

Code Execution Auth Bypass Agent Framework Plugin

praisonai Patch: 4.6.59 CWE-78 1 5 ATLAS

PraisonAI AgentOS: unauth remote agent invocation (CVSS 9.8)

GHSA-892r-p3jq-jp24

Auth Bypass Code Execution Data Extraction Agent Framework API

praisonai Patch: 4.6.59 CWE-200 1 7 ATLAS

praisonaiagents: unauth AgentTeam API allows agent takeover

GHSA-x8cv-xmq7-p8xp

Auth Bypass Code Execution DoS Agent Framework

praisonaiagents Patch: 1.6.59 CWE-306 20 5 ATLAS

praisonai: unauthenticated Jobs API enables remote agent RCE

GHSA-fq2m-6wqh-x44g

Auth Bypass Code Execution Data Extraction Agent Framework API

praisonai Patch: 4.6.59 CWE-94 1 5 ATLAS

praisonai: silent auth bypass exposes agent exec endpoints

GHSA-j4hj-7hfh-g2f4

Auth Bypass Code Execution Agent Framework

praisonai Patch: 4.6.59 CWE-306 1 4 ATLAS

PraisonAI: Unauthenticated RCE via Jobs API auth bypass

GHSA-4869-x4pr-q22x

Auth Bypass Code Execution Prompt Injection Agent Framework Plugin

praisonaiagents Patch: 1.6.59 CWE-306 20 5 ATLAS

praisonaiagents: unauthenticated MCP SSE server enables RCE

GHSA-x227-pf99-vffg

Auth Bypass Code Execution Agent Framework

praisonaiagents Patch: 1.6.59 CWE-306 20 5 ATLAS

CRITICAL EXPLOIT AVAIL SCANNER

Langflow: unauthenticated upload → DoS + path disclosure

CVE-2026-55450

Auth Bypass DoS Data Leakage Framework Agent

langflow Patch: 1.9.1 CWE-400 5 ATLAS

CRITICAL EXPLOIT AVAIL

picklescan: scanner bypass enables pickle RCE

CVE-2026-53874

Supply Chain Code Execution Model Framework

picklescan CWE-502 3 4 ATLAS

CRITICAL EXPLOIT AVAIL

picklescan: blocklist bypass allows arbitrary code exec

CVE-2026-53873

Supply Chain Code Execution Model Framework

picklescan 3 4 ATLAS

Frequently asked questions

What is an AI security threat feed?

An AI security threat feed is a continuously updated stream of vulnerabilities (CVEs) affecting AI and machine-learning systems — LLM frameworks, ML libraries, AI agents, vector databases, and inference servers — filtered out of the broader CVE firehose and enriched for relevance.

Which sources are the AI CVEs tracked from?

CVEs are tracked from NVD, GitHub Advisory, CISA KEV, and MITRE ATLAS, then enriched with CVSS, EPSS, exploitation confidence, AI-component classification, and compliance mappings.

What AI systems do these vulnerabilities affect?

Coverage spans LLM frameworks, ML libraries, AI agents, vector databases, and inference servers — the components most security teams now run in production.

How often is the AI threat feed updated?

The feed updates continuously as new CVEs are published and enriched, so the most recent AI/ML vulnerabilities appear at the top.

Is the AI security feed free?

Yes — the public feed is free to browse. A Pro subscription adds breaking alerts, MITRE ATLAS mappings, compliance reports (ISO 42001, EU AI Act), and full CISO analysis.

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial