AI Security Threat Feed

MLflow: RCE via pmdarima model deserialization

MLflow: deserialization RCE via malicious PyFunc model

MLflow: RCE via malicious scikit-learn model deserialization

MLflow: RCE via malicious scikit-learn model upload

Ollama: path traversal enables RCE via model blob API

WordPress ChatBot: missing authz deletes OpenAI files

WordPress AI ChatBot: auth bypass enables OpenAI file upload

MLflow: URL fragment bypass leaks SSH and cloud keys

SolidUI: OpenAI API key exposed via log print statement

Gradio: credential leakage via Windows path encoding bug

SageMaker SDK: pickle deserialization enables RCE

PyTorch: use-after-free in JIT mobile interpreter, RCE

LangChain: path traversal allows arbitrary file R/W

MLflow: path traversal via URI fragment reads arbitrary files

MLflow: path traversal via ';' smuggling exposes files

MLflow: path traversal allows arbitrary directory deletion

MLflow: path traversal enables arbitrary file read

MLflow: path traversal exposes arbitrary server files

Gradio: path traversal leaks arbitrary files, potential RCE

Gradio: CI/CD command injection enables secrets exfil