AML.T0048.000

Financial Harm

Financial harm involves the loss of wealth, property, or other monetary assets due to theft, fraud or forgery, or pressure to provide financial resources to the adversary.

9 CVEs mapped View on MITRE ATLAS →

Severity	CVE	Headline	Package	CVSS
CRITICAL	CVE-2025-59434	Flowise Cloud: cross-tenant env var exposure leaks API keys		9.6
HIGH	CVE-2026-29872	awesome-llm-apps MCP Agent: cross-session credential theft		8.2
HIGH	CVE-2026-44556	open-webui: auth bypass allows unrestricted model access	open-webui	7.1
MEDIUM	CVE-2025-14980	BetterDocs: Info Disclosure leaks sensitive data		6.5
MEDIUM	CVE-2026-21894	n8n: security flaw enables exploitation	n8n	6.5
MEDIUM	CVE-2024-13698	Jobify WP: missing authz allows OpenAI key abuse, SSRF		6.5
MEDIUM	CVE-2025-12360	Better: security flaw enables exploitation		4.3
UNKNOWN	CVE-2026-4399	1millionbot Millie: Boolean prompt injection bypasses restrictions		—
UNKNOWN	CVE-2024-11037	gpt_academic: path traversal exposes LLM API keys	gpt_academic	—