AI Security Threat Feed

Langflow is a tool for building and deploying AI-powered agents and workflows. Versions 1.2.0 through 1.8.1 have a bypass of the patch for CVE-2025-68478 (External Control of File Name), leading to...

A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of `tarfile.extractall` without path...

MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment

PickleScan has multiple stdlib modules with direct RCE not in blocklist

PickleScan's pkgutil.resolve_name has a universal blocklist bypass

PickleScan's profile.run blocklist mismatch allows exec() bypass

MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not...

Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic...

Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack

The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without...

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a...

ExecuTorch out-of-bounds access vulnerability

ExecuTorch vulnerable to Heap-based Buffer Overflow

ExecuTorch heap buffer overflow vulnerability

ExecuTorch integer overflow vulnerability

ExecuTorch integer overflow vulnerability

llama_index vulnerable to SQL Injection

Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL

CVE-2025-24357 Malicious model remote code execution fix bypass with PyTorch < 2.6.0

PyTorch Lightning path traversal vulnerability

LLama Factory enables fine-tuning of large language models. A critical remote OS command injection vulnerability has been identified in the LLama Factory training process. This vulnerability arises...

Ray Missing Authorization vulnerability

Ray OS Command Injection vulnerability

Ray Path Traversal vulnerability

Langchain SQL Injection vulnerability