AI Security Tracker

AI Security Tracker

Incidents and vulnerabilities in AI products, with status and exploitation.

Entries
2002
Incidents
22
CVE
1966
GHSA
14
Exploited
17

2002 shown

VendorTitleType StatusExploitedSource
Other Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly…CVE-2026-120338 CVE 10.0 Fixed nvd.nist.gov
TAKO AI Agent for Okta Prior to 3.0.1-beta, any authenticated user with a valid `fctr_session` cookie can submit arbitrary Python…CVE-2026-63378 CVE 8.8 Fixed nvd.nist.gov
TAKO AI Agent for Okta Prior to 3.0.1-beta, `POST /api/auth/setup` in `src/api/routers/auth.py` allows an unauthenticated network…CVE-2026-63377 CVE 9.8 Fixed nvd.nist.gov
MoLing Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse` and `/message` HTTP endpoints do not…CVE-2026-62863 CVE 9.6 Fixed nvd.nist.gov
PDF Reader MCP In versions 2.2.0 and later prior to 3.0.1, when `MCP_TRANSPORT=http` enables the opt-in HTTP server…CVE-2026-62264 CVE 7.5 Fixed nvd.nist.gov
DBHub Prior to 0.22.6, read-only SQL validation can be bypassed on the MySQL and MariaDB connectorsCVE-2026-61789 CVE 6.1 Fixed nvd.nist.gov
SOCFortress CoPilot Prior to 0.1.77, the Velociraptor Sigma exclusion-management endpoints in `backend/app/inc…CVE-2026-61739 CVE 7.5 Fixed nvd.nist.gov
SOCFortress CoPilot Prior to 0.1.77, `POST /api/scoutsuite/generate-gcp-report` in `backend/app/integrations/s…CVE-2026-61738 CVE 10.0 Fixed nvd.nist.gov
SOCFortress CoPilot In affected deployments, the unauthenticated `/scoutsuite-report` `StaticFiles` mount in `backend/copilot.py`…CVE-2026-61730 CVE 9.3 Research disclosed nvd.nist.gov
SOCFortress CoPilot Prior to 0.1.76, `verify_graylog_header` in `backend/app/active_response/routes/graylog.py` and…CVE-2026-61729 CVE 9.4 Fixed nvd.nist.gov
SOCFortress CoPilot In affected snapshots preceding the respective 0.1.70 and 0.1.76 sink repairs, portal users, including…CVE-2026-61728 CVE 9.9 Research disclosed nvd.nist.gov
SOCFortress CoPilot Prior to 0.1.76, `POST /api/agent_data_store/upload` in `backend/app/data_store/data_store_routes.py` permits…CVE-2026-61708 CVE 8.5 Fixed nvd.nist.gov
AI Engine The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing…CVE-2026-110732 CVE 7.5 Research disclosed nvd.nist.gov
SOCFortress CoPilot Prior to 0.1.76, in the reported deployment, case-report templates uploaded by `customer_user`, the…CVE-2026-61707 CVE 9.0 Fixed nvd.nist.gov
Agno Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to…CVE-2026-119050 CVE 8.1 Research disclosed nvd.nist.gov
Open open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute…CVE-2026-119025 CVE 7.5 Fixed nvd.nist.gov
Langflow IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated…CVE-2026-110193 CVE 8.8 Research disclosed nvd.nist.gov
Other In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from…CVE-2026-99164 CVE 7.8 Research disclosed nvd.nist.gov
AnkiMCP Prior to version 0.21.0, `anki_mcp_server/mcp_server.py` globally disables FastMCP DNS-rebinding protection…CVE-2026-61546 CVE 8.8 Fixed nvd.nist.gov
Gearboy Gearsystem, the affected component, has an optional `--mcp-http` mode that accepts unauthenticated MCP…CVE-2026-61542 CVE 8.6 Research disclosed nvd.nist.gov
Functype Prior to 1.4.4, the `set_functype_version` MCP tool in `functype-mcp-server` accepts an unconstrained…CVE-2026-59176 CVE 7.8 Fixed nvd.nist.gov
LangChainlanggraph LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsCVE-2026-118667 CVE 4.3 Fixed github.com
Tabularis Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients…CVE-2026-118378 CVE 7.8 Fixed nvd.nist.gov
Convert In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal…CVE-2026-118038 CVE 7.1 Fixed nvd.nist.gov
Other A flaw was found in ai-gateway-payload-processingCVE-2026-117574 CVE 9.1 Fixed nvd.nist.gov
AI ChatBot for WooCommerce The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorization bypass in all…CVE-2026-111372 CVE 4.3 Research disclosed nvd.nist.gov
MxChat The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored…CVE-2026-110662 CVE 7.2 Research disclosed nvd.nist.gov
Other The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin…CVE-2026-110185 CVE 5.9 Research disclosed nvd.nist.gov
Other The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation…CVE-2026-109999 CVE 7.2 Research disclosed nvd.nist.gov
AI Engine The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited…CVE-2026-107745 CVE 4.2 Research disclosed nvd.nist.gov
AmazonStrands Agents Tools (strands-agents-tools) Prompt-controlled secret masking bypass in Strands Agents Tools environment toolAIS-2026-006 Incident 6.5 Fixed aws.amazon.com
LiteLLM LiteLLM vulnerable to reflected XSS in /sso/debug/callbackGHSA-hhww-mrg2-969h GHSA 6.8 Fixed github.com
LiteLLM LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`GHSA-g5ff-637f-6q2m GHSA 8.1 Fixed github.com
Model Context Protocol@modelcontextprotocol/sdk MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch…GHSA-f897-62hf-6gxq GHSA 7.5 Fixed github.com
Other Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity IncCVE-2026-92546 CVE 7.5 Fixed nvd.nist.gov
Hagent hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to…CVE-2026-117573 CVE 7.8 Research disclosed nvd.nist.gov
Kali-GPT Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in…CVE-2026-117569 CVE 7.8 Research disclosed nvd.nist.gov
Mcp Ffmpegmcp-ffmpeg mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell…CVE-2026-117568 CVE 7.0 Research disclosed nvd.nist.gov
Esp Mcpesp-mcp esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run…CVE-2026-117567 CVE 7.8 Research disclosed nvd.nist.gov
Other Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to…CVE-2026-117561 CVE 7.8 Research disclosed nvd.nist.gov
Other The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows…CVE-2026-117558 CVE 7.8 Research disclosed nvd.nist.gov
Other llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tok…CVE-2026-116816 CVE 7.8 Fixed nvd.nist.gov
MLflow MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization…CVE-2026-116692 CVE 9.8 Fixed github.com
MLflow MLflow CrewAI autologging records LLM provider API keys in logged trace spansCVE-2026-116691 CVE 6.5 Fixed github.com
MLflow MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version sourceCVE-2026-116690 CVE 7.5 Fixed github.com
Model Context Protocolmcp Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results…CVE-2026-116686 CVE 6.5 Fixed github.com
Model Context Protocolmcp Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom…CVE-2026-116685 CVE 5.9 Fixed github.com
Model Context Protocolmcp Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different…CVE-2026-116684 CVE 6.8 Fixed github.com
OAuth Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0…CVE-2026-115413 CVE 7.8 Fixed nvd.nist.gov
vLLM vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code executionCVE-2026-114053 CVE 8.1 Fixed github.com
Mem0 Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py and…CVE-2026-116575 CVE 6.3 Fixed nvd.nist.gov
Other A vulnerability has been found in continuedev Continue 2.0.0CVE-2026-116109 CVE 6.3 Research disclosed nvd.nist.gov
vLLM vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargsCVE-2026-115918 CVE 6.5 Fixed github.com
vLLM vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP serverCVE-2026-115917 CVE 4.7 Fixed github.com
vLLM vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert…CVE-2026-115916 CVE 6.5 Fixed github.com
vLLM vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCECVE-2026-115915 CVE 9.8 Fixed github.com
vLLM vLLM DeepSeek-OCR image processing vulnerable to denial of serviceCVE-2026-115914 CVE 6.5 Fixed github.com
vLLM vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length…CVE-2026-115913 CVE 6.5 Fixed github.com
vLLM vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization…CVE-2026-115912 CVE 8.8 Fixed github.com
vLLM vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread poolCVE-2026-115911 CVE 6.5 Fixed github.com
Other Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the…CVE-2026-115718 CVE 4.3 Research disclosed nvd.nist.gov
CreditNirvana Agentic AI Call Centre This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API…CVE-2026-110474 CVE 8.7 Research disclosed nvd.nist.gov
vLLM vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to…CVE-2026-116178 CVE 7.5 Fixed osv.dev
vLLM vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows…CVE-2026-116177 CVE 7.5 Fixed osv.dev
vLLM vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to…CVE-2026-116176 CVE 8.2 Fixed osv.dev
vLLM vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to…CVE-2026-116173 CVE 7.5 Fixed osv.dev
Other In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: account only unread bytes…CVE-2026-99062 CVE — Research disclosed nvd.nist.gov
RX In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error…CVE-2026-99046 CVE 7.5 Research disclosed nvd.nist.gov
Other In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: zero at…CVE-2026-98873 CVE — Research disclosed nvd.nist.gov
Entire CLI Entire CLI hooks into Git workflows to capture AI agent sessionsCVE-2026-57208 CVE 6.2 Fixed nvd.nist.gov
NetBoxNetBox MCP Server Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP…CVE-2026-57207 CVE 5.9 Fixed nvd.nist.gov
MLflow MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register…CVE-2026-115886 CVE 6.5 Fixed github.com
Python An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server…CVE-2026-115845 CVE 6.4 Research disclosed nvd.nist.gov
AgenticSeek AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py…CVE-2026-115727 CVE 8.1 Fixed nvd.nist.gov
Other From 1.0.1 until 1.31.4, `create_entity`, `link_entities`, `rename_entity`, `unlink_entities` and…CVE-2026-115478 CVE 7.1 Fixed nvd.nist.gov
Other From 1.13.0 until 1.31.4, on a Streamable HTTP deployment with `auth.jwtSecret` configured and a…CVE-2026-115477 CVE 7.1 Fixed nvd.nist.gov
vLLM vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)CVE-2026-114055 CVE 7.5 Fixed github.com
vLLM vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the…CVE-2026-114050 CVE 6.5 Fixed github.com
LiteLLM LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt KeyCVE-2026-114612 CVE 9.9 Fixed github.com
LangChain From 0.6.0 until 0.8.2, the _escape() helper in flexible-graphrag/langchain/graph/pg_store…CVE-2026-114510 CVE 7.1 Fixed nvd.nist.gov
Other A flaw was found in GooseCVE-2026-111079 CVE 7.4 Research disclosed nvd.nist.gov
Other Prior to version 1.11.0, the officially documented Azure one-click deployment uses infrast…CVE-2026-114123 CVE 7.5 Fixed nvd.nist.gov
Other HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows…CVE-2026-114107 CVE 8.8 Fixed nvd.nist.gov
Other HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote…CVE-2026-114106 CVE 7.5 Fixed nvd.nist.gov
Model Context ProtocolMCP Inspector (@modelcontextprotocol/inspector) MCP Inspector RCE via malicious OAuth callback switching transport to stdioAIS-2026-005 Incident — Fixed github.com
MLflow MLflow FileStore trace IDs allow path traversal and arbitrary file writesCVE-2026-53995 CVE 8.2 Fixed github.com
Djust From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the find_handlers_for_template MCP tool in…CVE-2026-113731 CVE 3.3 Fixed nvd.nist.gov
Mcp Ripgrepmcp-ripgrep A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0CVE-2026-113378 CVE 5.3 Research disclosed nvd.nist.gov
Model Context Protocol@modelcontextprotocol/sdk MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another serviceCVE-2026-111771 CVE 6.8 Fixed github.com
Model Context Protocol@modelcontextprotocol/sdk MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and…CVE-2026-111769 CVE 6.5 Fixed github.com
Model Context Protocol@modelcontextprotocol/sdk MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during…CVE-2026-111768 CVE 7.5 Fixed github.com
Model Context Protocol@modelcontextprotocol/sdk MCP TypeScript SDK: Experimental tasks were not tied to the session that created themCVE-2026-111767 CVE 8.6 Fixed github.com
OpenSRE OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to…CVE-2026-109444 CVE 9.8 Research disclosed nvd.nist.gov
JoySafeter JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to…CVE-2026-109443 CVE 8.8 Research disclosed nvd.nist.gov
Piflow piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose…CVE-2026-109442 CVE 9.8 Research disclosed nvd.nist.gov
LangAlpha LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers…CVE-2026-109440 CVE 8.8 Research disclosed nvd.nist.gov
CrewAI crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool…CVE-2026-112308 CVE 7.4 Research disclosed nvd.nist.gov
Anx Calibre Manageranx-calibre-manager A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12CVE-2026-112297 CVE 4.3 Research disclosed nvd.nist.gov
LangBot LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauthenticated…CVE-2026-112265 CVE 6.5 Research disclosed nvd.nist.gov
GoogleGoogle OSS Agent Mesh Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the…CVE-2026-102503 CVE 9.3 Fixed nvd.nist.gov
QuantumCloud Conversational Forms for ChatBot Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot…CVE-2026-110886 CVE 9.8 Research disclosed nvd.nist.gov
Claude Agent SDK Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a…CVE-2026-96620 CVE 9.2 Fixed nvd.nist.gov
Other An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to…CVE-2026-95183 CVE 8.8 Research disclosed nvd.nist.gov
LangChat LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated…CVE-2026-111704 CVE 9.8 Research disclosed nvd.nist.gov
EFAK EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated…CVE-2026-111682 CVE 6.5 Research disclosed nvd.nist.gov
Xiaozhi-esp32-server-java Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows…CVE-2026-111623 CVE 5.6 Research disclosed nvd.nist.gov
Wheels CLI Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contentsCVE-2026-111451 CVE 7.8 Fixed nvd.nist.gov
WSPWSP MCP AI Agents Connector The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in…CVE-2026-109382 CVE 6.5 Research disclosed nvd.nist.gov
IntentKit IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the…CVE-2026-76066 CVE 7.5 Fixed nvd.nist.gov
NetLicensingNetLicensing MCP Server Prior to 0.1.8, netlicensing_get_product passes the caller-controlled product_number to sr…CVE-2026-57496 CVE 9.6 Fixed nvd.nist.gov
JetBrains Junie CLI In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server…CVE-2026-111091 CVE 7.8 Fixed nvd.nist.gov
Model Context Protocolmcp MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource ExhaustionCVE-2026-59951 CVE 6.9 Fixed github.com
NullHub NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated…CVE-2026-110616 CVE 8.1 Research disclosed nvd.nist.gov
The Model Context Protocol Python SDK In mcp versions before 1.29.1 and from 2.0.0a1 through 2.0.1, the Streamable HTTP session manager, SSE…CVE-2026-109527 CVE 7.5 Fixed nvd.nist.gov
The Model Context Protocol Java SDK From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mcp artifact, from 0.13.0 through 0.18.3…CVE-2026-108395 CVE 7.5 Fixed nvd.nist.gov
Ludwig Prior to 0.17.8, ludwig.datasets.archives.extract_archive() validated tar member names before calling…CVE-2026-104103 CVE 8.1 Fixed nvd.nist.gov
GitLab GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before…CVE-2026-96893 CVE 7.3 Fixed nvd.nist.gov
Other Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned…CVE-2026-77362 CVE 4.3 Fixed nvd.nist.gov
Other Prior to 1.3.1, read access-control list (ACL) checks use a lexical vault-relative path while containment…CVE-2026-77361 CVE 4.7 Fixed nvd.nist.gov
Other Heym builds and runs agentic systems and business-process automations on self-hosted infrastructureCVE-2026-55376 CVE 8.8 Fixed nvd.nist.gov
RoocodeRoo Code Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that allows…CVE-2026-110206 CVE 8.8 Research disclosed nvd.nist.gov
RoocodeRoo Code Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards…CVE-2026-110205 CVE 8.8 Research disclosed nvd.nist.gov
RoocodeRoo Code Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied…CVE-2026-110204 CVE 8.8 Research disclosed nvd.nist.gov
RoocodeRoo Code Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to…CVE-2026-110203 CVE 8.8 Research disclosed nvd.nist.gov
RoocodeRoo Code Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows…CVE-2026-110202 CVE 8.8 Research disclosed nvd.nist.gov
Nginx UI Prior to 2.4.1, internal/config/validation.go (ValidateConfigFile) is a security control that blocks…CVE-2026-84317 CVE 8.8 Fixed nvd.nist.gov
Other Prior to 1.3.1, tool dispatch does not compare the caller-controlled input.vault value with the vault bound…CVE-2026-77366 CVE 9.9 Fixed nvd.nist.gov
Other Prior to 1.3.1, undefined readPaths and writePaths settings allow all paths, strictReadDefault does not…CVE-2026-77364 CVE 6.5 Fixed nvd.nist.gov
Other Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable…CVE-2026-77363 CVE 8.8 Fixed nvd.nist.gov
PraisonAI Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled…CVE-2026-57143 CVE 8.8 Fixed nvd.nist.gov
Katanemo Plano Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated…CVE-2026-108863 CVE 7.5 Research disclosed nvd.nist.gov
UnicomAI Wanwu UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users…CVE-2026-108856 CVE 4.2 Research disclosed nvd.nist.gov
phpMyFAQ phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search tool that…CVE-2026-108851 CVE 3.3 Research disclosed nvd.nist.gov
Abilityai Trinity Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that…CVE-2026-108756 CVE 5.4 Research disclosed nvd.nist.gov
Jotform Unauthenticated Cross Site Scripting (XSS) in Jotform &#8211; AI Chatbot <= 3.8.2 versionsCVE-2026-40803 CVE 7.1 Research disclosed nvd.nist.gov
JeecgBoot JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to…CVE-2026-108671 CVE 6.5 Research disclosed nvd.nist.gov
JeecgBoot JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of…CVE-2026-108670 CVE 4.3 Research disclosed nvd.nist.gov
JeecgBoot JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById…CVE-2026-108605 CVE 4.3 Research disclosed nvd.nist.gov
Other open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the…CVE-2026-108600 CVE 4.7 Research disclosed nvd.nist.gov
Phi phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious…CVE-2026-108599 CVE 4.7 Research disclosed nvd.nist.gov
OpenLIT OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other…CVE-2026-108596 CVE 5.3 Research disclosed nvd.nist.gov
9Router 9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST…CVE-2026-108593 CVE 6.4 Research disclosed nvd.nist.gov
Mini Swe Agentmini-swe-agent mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment…CVE-2026-108592 CVE 5.3 Research disclosed nvd.nist.gov
Other 1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows…CVE-2026-108586 CVE 5.4 Research disclosed nvd.nist.gov
Other argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the…CVE-2026-108585 CVE 5.4 Research disclosed nvd.nist.gov
Zotero Mcpzotero-mcp zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers…CVE-2026-108583 CVE 4.2 Research disclosed nvd.nist.gov
GenOffice GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store…CVE-2026-108582 CVE 5.5 Research disclosed nvd.nist.gov
TencentCloud Octop TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated…CVE-2026-108581 CVE 6.5 Research disclosed nvd.nist.gov
Astron Agent Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and…CVE-2026-108263 CVE 9.9 Fixed nvd.nist.gov
AstronRPA AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component…CVE-2026-108159 CVE 7.5 Research disclosed nvd.nist.gov
Other Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while…CVE-2026-107824 CVE 9.3 Fixed nvd.nist.gov
Debug Prior to 1.2, src/core/mcp_server.zig parses an unbounded Content-Length value in parseContentLength() and…CVE-2026-107820 CVE 5.3 Fixed nvd.nist.gov
AnthropicClaude Code and Claude Desktop Claude Code plugin commit SHA pin bypass allows attacker-controlled code installAIS-2026-004 Incident 7.5 Fixed github.com
Uncanny Automator The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included…CVE-2026-82627 CVE 7.5 Research disclosed nvd.nist.gov
SumatraPDF In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pasted translation text in quoted Windows…CVE-2026-107802 CVE 7.1 Research disclosed nvd.nist.gov
Other Banks generates meaningful LLM prompts using a simple template languageCVE-2026-107717 CVE 6.5 Fixed nvd.nist.gov
Other Banks generates meaningful LLM prompts using a simple template languageCVE-2026-107716 CVE 7.3 Fixed nvd.nist.gov
SplunkSplunk MCP Server In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication…CVE-2026-76286 CVE 5.3 Research disclosed nvd.nist.gov
FlowiseAIflowise Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via ChromiumCVE-2026-73483 CVE Critical Fixed github.com
FlowiseAIflowise Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via ChromiumCVE-2026-119978 CVE Critical Fixed osv.dev
Langflow Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource HandlersCVE-2026-105699 CVE High Fixed github.com
Langflow Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices…CVE-2026-105698 CVE 5.4 Fixed github.com
Langflow Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS…GHSA-j8f7-x8jm-wmm4 GHSA Medium Fixed github.com
Kognetiks Chatbot for WordPress Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versionsCVE-2026-32579 CVE 10.0 Research disclosed nvd.nist.gov
LangChain Prior to 1.3.1, MongoDBChatMessageHistory does not enforce the documented string type for an untrusted…CVE-2026-106119 CVE 6.0 Fixed nvd.nist.gov
vLLM A security flaw has been discovered in vllm-project vLLM up to 0.31.0CVE-2026-105922 CVE — Fixed osv.dev
LangChain Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG…CVE-2026-105799 CVE 2.3 Fixed nvd.nist.gov
Dify Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remote_files.py…CVE-2026-105762 CVE 8.3 Fixed nvd.nist.gov
Langflow Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege…CVE-2026-10561 CVE 9.9 Fixed github.com
Model Context Protocol@modelcontextprotocol/sdk MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP serverCVE-2026-104850 CVE 7.5 Fixed github.com
Themeisle AI Chatbot for WordPress Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve…CVE-2026-97305 CVE 6.9 Research disclosed nvd.nist.gov
Langflow Langflow: Weak Fernet Key via random.seed()CVE-2026-9205 CVE 9.1 Fixed github.com
Langflow Langflow: Unauthenticated Flow Execution via Webhook Authentication BypassCVE-2026-8505 CVE 9.8 Fixed github.com
Langflow Langflow: Prompt injection in Langflow Smart Transform can lead to code executionCVE-2026-7700 CVE 8.8 Fixed github.com
Langflow Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators DescriptionCVE-2026-51886 CVE 8.8 Fixed github.com
Dify Prior to 1.16.0, the PUT /console/api/apps/&lt;app_id&gt;/server endpoint in api/controlle…CVE-2026-105761 CVE 7.1 Fixed nvd.nist.gov
vLLM vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustionCVE-2026-105760 CVE 5.3 Fixed github.com
vLLM Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method token as a…CVE-2026-105759 CVE 7.5 Fixed nvd.nist.gov
vLLM vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling…CVE-2026-105758 CVE 5.3 Fixed github.com
vLLM vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore —…CVE-2026-105757 CVE 6.5 Fixed github.com
vLLM vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments —…CVE-2026-105756 CVE 6.5 Fixed github.com
vLLM vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id —…CVE-2026-105755 CVE 4.2 Fixed github.com
vLLM vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresCVE-2026-105754 CVE 6.5 Fixed github.com
vLLM vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media…CVE-2026-105753 CVE 6.5 Fixed github.com
vLLM vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracleCVE-2026-105752 CVE 3.1 Fixed github.com
Langflow Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration WriteCVE-2026-105741 CVE 7.1 Fixed github.com
Langflow Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution (RCE) on the server by…CVE-2026-105740 CVE 9.9 Fixed nvd.nist.gov
Langflow Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configurationCVE-2026-105697 CVE 9.9 Fixed github.com
SupportCandy The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable…CVE-2026-94539 CVE 6.5 Research disclosed nvd.nist.gov
SupportCandy The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable…CVE-2026-94378 CVE 6.4 Research disclosed nvd.nist.gov
Other Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString…CVE-2026-104433 CVE 7.5 Fixed nvd.nist.gov
VercelNext.js From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without…CVE-2026-94486 CVE 5.4 Fixed nvd.nist.gov
VercelNext.js From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model Context Protocol endpoint without…CVE-2026-94485 CVE 5.3 Fixed nvd.nist.gov
Other Server-Side request forgery (SSRF) vulnerability in HAVELSAN IncCVE-2026-80464 CVE 4.9 Fixed nvd.nist.gov
Other Improper certificate validation vulnerability in HAVELSAN IncCVE-2026-80443 CVE 7.4 Fixed nvd.nist.gov
Other Missing Authorization vulnerability in HAVELSAN IncCVE-2026-80337 CVE 5.3 Fixed nvd.nist.gov
Other Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in…CVE-2026-80298 CVE 8.8 Fixed nvd.nist.gov
AI Engine The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored…CVE-2026-96561 CVE 7.2 Research disclosed nvd.nist.gov
Obot Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to…CVE-2026-103758 CVE 8.1 Research disclosed nvd.nist.gov
Office-PowerPoint-MCP-Server Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to…CVE-2025-71427 CVE 6.8 Research disclosed nvd.nist.gov
Conversational Forms for ChatBot Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versionsCVE-2026-95531 CVE 8.8 Research disclosed nvd.nist.gov
Soft Machine In versions 0.2.247 and prior, two authentication helpers in /app/server.js — verifyContainerAuth() and…CVE-2026-55176 CVE 9.0 Research disclosed nvd.nist.gov
Runner.execute Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py…CVE-2026-51871 CVE 9.8 Research disclosed nvd.nist.gov
Soft Machine In versions 0.2.247 and prior, the workspace HTTP service that listens on 0.0.0.0:8080 inside each sm-ws-*…CVE-2026-46711 CVE 8.3 Research disclosed nvd.nist.gov
vLLM A flaw has been found in vllm-project vLLM up to 0.26.0CVE-2026-103241 CVE 7.5 Fixed osv.dev
MetaMeta AI Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products…CVE-2026-77177 CVE 9.8 Research disclosed nvd.nist.gov
Ollamagithub.com/ollama/ollama Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental…CVE-2026-102697 CVE 7.8 Fixed nvd.nist.gov
Other Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the…CVE-2026-59563 CVE 4.6 Fixed nvd.nist.gov
Other Prior to version 30.1, the send_message/send_message_to_phone MCP tools accept files as a list of http(s)…CVE-2026-55096 CVE 7.1 Fixed nvd.nist.gov
Obot obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any…CVE-2026-101084 CVE 9.6 Fixed nvd.nist.gov
Obot In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README…CVE-2026-101065 CVE 9.8 Fixed nvd.nist.gov
Obot Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration…CVE-2026-101064 CVE 7.6 Fixed nvd.nist.gov
Obot Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICATION=true…CVE-2026-101062 CVE 8.8 Fixed nvd.nist.gov
Other utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs…CVE-2026-101057 CVE 3.1 Fixed nvd.nist.gov
Penpot Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without…CVE-2026-100868 CVE 6.3 Fixed nvd.nist.gov
Heym Heym versions 0.0.90 and earlier contain two server-side request forgery (SSRF) egress gaps, both remediated…CVE-2026-100863 CVE 5.0 Research disclosed nvd.nist.gov
Other The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization…CVE-2026-96526 CVE 2.7 Fixed nvd.nist.gov
Other The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or sufficient…CVE-2026-96525 CVE 2.7 Fixed nvd.nist.gov
Other The MCP Server for WordPress WordPress plugin before 1.8.2 does not correctly verify the WordPress REST API…CVE-2026-96524 CVE 8.8 Fixed nvd.nist.gov
vLLM In versions from 0.22.1 through 0.28.0, the operator-supplied model revision pin (--revision /…CVE-2026-100653 CVE 6.5 Fixed nvd.nist.gov
vLLM vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP…CVE-2026-100652 CVE 7.5 Fixed osv.dev
vLLM vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented…CVE-2026-100650 CVE — Fixed osv.dev
SiYuan In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard (util.IsForbiddenAbsPath(), invoked…CVE-2026-100633 CVE 6.5 Fixed nvd.nist.gov
LangChain4j A flaw has been found in langchain4j up to 1.5.3-beta10/1.11.10-beta18/1.18.1-beta27CVE-2026-97869 CVE 4.1 Fixed nvd.nist.gov
Other Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the…CVE-2026-97228 CVE 2.7 Fixed nvd.nist.gov
LiteLLM BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache…CVE-2026-89032 CVE 7.7 Fixed nvd.nist.gov
Zammad Prior to 7.1.2, a security filter that protects Zammad's AI Agent configuration can be bypassed by entering…CVE-2026-84462 CVE 8.6 Fixed nvd.nist.gov
Zammad Prior to 7.1.2, unsanitized option labels are rendered in the configuration dialogs of AI Agents within…CVE-2026-63216 CVE 5.3 Fixed nvd.nist.gov
Ollamagithub.com/ollama/ollama Prior to 3.3.0, TREK allows an authenticated user to store an attacker-controlled llm_base_url through the…CVE-2026-77294 CVE 8.1 Fixed nvd.nist.gov
DBHub Prior to version 0.22.6, setting `readonly = true` on the `execute_sql` tool does not make the connection…CVE-2026-61788 CVE 7.4 Fixed nvd.nist.gov
DBHub Versions prior to 0.22.5 expose an unauthenticated HTTP MCP endpoint when started with the documented HTTP…CVE-2026-61742 CVE 9.3 Fixed nvd.nist.gov
vLLM Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services…CVE-2026-61732 CVE 10.0 Fixed nvd.nist.gov
Other mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the…CVE-2026-51994 CVE 9.1 Research disclosed nvd.nist.gov
WSPWSP MCP Contributor Broken Access Control in WSP MCP &#8211; AI Agents Connector <= 2.7.0 versionsCVE-2026-93529 CVE 6.5 Research disclosed nvd.nist.gov
IBMFinancial Transaction Manager IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via…CVE-2026-18875 CVE 7.3 Research disclosed nvd.nist.gov
FastGPT Prior to 4.15.2, the safe Axios request interceptor in packages/service/common/api/axios.ts validates a…CVE-2026-84301 CVE 6.3 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, validate_url_for_ssrf has a backslash authority confusion because it interprets the…CVE-2026-77274 CVE 8.2 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, the OAuth error query parameter is passed to CallbackHandler._send_response in…CVE-2026-77272 CVE 6.1 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence…CVE-2026-77271 CVE 8.8 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, the Jira and Confluence attachment upload tools treat caller-controlled file_path values as…CVE-2026-77270 CVE 6.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, the remediation for CVE-2026-27825 protects download destinations but does not constrain…CVE-2026-77269 CVE 6.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, the OAuth fallback token directory and JSON file are created without explicit owner-only…CVE-2026-77268 CVE 5.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by…CVE-2026-77267 CVE 6.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, upload_attachment accepts absolute paths and traversal sequences without constraining the…CVE-2026-77266 CVE 6.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client…CVE-2026-77265 CVE 7.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, confluence_upload_attachment accepts an attacker-controlled file_path and does not apply the…CVE-2026-77262 CVE 8.6 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, _make_ssrf_safe_hook is omitted from JiraFetcher and ConfluenceFetcher sessions created…CVE-2026-77261 CVE 8.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, the Confluence and Jira upload_attachment implementations accept an unconstrained file_path…CVE-2026-77260 CVE 7.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, confluence_upload_attachment opens a caller-selected server-local file without checking that…CVE-2026-77259 CVE 7.7 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/attachments.py accepts a caller-controlled…CVE-2026-77258 CVE 7.7 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-provided file_path to local file…CVE-2026-77257 CVE 6.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, the plaintext OAuth fallback file containing refresh and access tokens is written with…CVE-2026-77256 CVE 6.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, the Jira update_issue attachments argument is converted into local paths and routed to the…CVE-2026-77255 CVE 8.6 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user identity are allowed to reach tool…CVE-2026-77254 CVE 9.1 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, Jira and Confluence attachment upload tools accept arbitrary local filesystem paths and send…CVE-2026-77253 CVE 7.1 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, caller-supplied projects_filter and spaces_filter arguments can replace a…CVE-2026-77252 CVE 6.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, Jira search accepts a forbidden project clause because it checks only for the presence of…CVE-2026-77251 CVE 6.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing access and refresh tokens under the…CVE-2026-77250 CVE 6.1 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, JiraUserMixin._lookup_user_by_permissions uses the module-level requests.get function…CVE-2026-77249 CVE 5.3 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, the streamable HTTP transport accepts requests without a user identity and falls back to…CVE-2026-77248 CVE 8.6 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, Jira and Confluence upload tools interpret caller-controlled path arguments on the MCP…CVE-2026-77247 CVE 6.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts a request without an…CVE-2026-77246 CVE 8.6 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, the HTTP transport accepts requests without a verified user identity and downstream fetcher…CVE-2026-77244 CVE 10.0 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, ENABLED_TOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a…CVE-2026-77243 CVE 8.8 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, validate_url_for_ssrf checks a hostname's resolved addresses, but Requests and urllib3…CVE-2026-77242 CVE 7.5 Fixed nvd.nist.gov
9Router Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing…CVE-2026-56681 CVE 7.3 Fixed nvd.nist.gov
vLLM vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatible…CVE-2026-94626 CVE — Fixed osv.dev
vLLM vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill…CVE-2026-94625 CVE — Fixed osv.dev
vLLM vllm p2p never connected zmq_exhaustionCVE-2026-94624 CVE 6.5 Fixed github.com
vLLM vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching…CVE-2026-94623 CVE — Fixed osv.dev
vLLM vLLM versions through 0.29.0 contain a denial of service vulnerability in the NIXL connector's metadata…CVE-2026-94622 CVE — Fixed osv.dev
Hatchet Prior to 0.106.1, the WorkerStatus gRPC polling path in pkg/repository/durable_events.go passes…CVE-2026-88978 CVE 4.3 Fixed nvd.nist.gov
Hatchet Prior to 0.95.3, the V1 DurableTask stream handler stores worker-supplied task_external_id values in the…CVE-2026-84298 CVE 3.1 Fixed nvd.nist.gov
MaxKB In 2.10.2-lts and earlier, a normal workspace user who knows another user's active MCP tool_id in the same…CVE-2026-77518 CVE 5.0 Research disclosed nvd.nist.gov
Hatchet Prior to 0.91.1, api-contracts/openapi/paths/v1/workflow-runs/workflow_run.yaml defines the GET…CVE-2026-63342 CVE 6.3 Fixed nvd.nist.gov
Hatchet Prior to 0.91.1, ValidateOAuthState clears the oauth_state_ session value to an empty string after a…CVE-2026-61687 CVE 7.1 Fixed nvd.nist.gov
Hatchet Prior to 0.91.1, the SNS UnsubscribeConfirmation handler in internal/integrations/ingestors/sns/sns.go calls…CVE-2026-61681 CVE 4.1 Fixed nvd.nist.gov
NotebookLMNotebookLM MCP Versions 1.6.0 through 2.0.2 contain a path traversal vulnerability in the `POST /batch-to-vault` endpoint…CVE-2026-61647 CVE 7.1 Research disclosed nvd.nist.gov
CKANCKAN MCP Server Prior to version 0.4.108, the SSRF guard `validateServerUrl` (added for CVE-2026-33060, extended for…CVE-2026-61612 CVE 5.7 Fixed nvd.nist.gov
MCP-for-Stata Prior to version 1.19.0, the ado_package_install MCP tool in stata-mcp concatenates user-controlled input…CVE-2026-55071 CVE 8.4 Fixed nvd.nist.gov
Tencent BrowserSkill Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon…CVE-2026-94111 CVE 6.6 Research disclosed nvd.nist.gov
vLLM vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output…CVE-2026-93989 CVE 4.3 Fixed osv.dev
OpenPanel OpenPanel through 2.3.0 writes Model Context Protocol authentication tokens from URL query parameters to…CVE-2026-93982 CVE 3.3 Research disclosed nvd.nist.gov
vLLM vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt…CVE-2026-93841 CVE 5.3 Fixed osv.dev
vLLM vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width…CVE-2026-93840 CVE 5.3 Fixed osv.dev
vLLM vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling…CVE-2026-93592 CVE — Fixed osv.dev
Microsoft365 Copilot Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to…CVE-2026-85887 CVE 7.7 Research disclosed nvd.nist.gov
ToolHive Prior to ToolHive CLI 0.30.1 and ToolHive Studio 0.38.0, locally run MCP server containers use the default…CVE-2026-58197 CVE 8.8 Fixed nvd.nist.gov
LMDeploy Versions 012.1 through 0.12.2 contain a code injection vulnerability in `lmdeploy/pytorch/config.py` line 620…CVE-2026-33625 CVE 8.8 Research disclosed nvd.nist.gov
LMDeploy Starting in version 0.9.2 and prior to version 0.16.0, LMDeploy's PyTorch DistServe/PD-disaggregation control…CVE-2025-66455 CVE 9.8 Fixed nvd.nist.gov
vLLM vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in…CVE-2026-93436 CVE — Fixed osv.dev
Microsoft365 Copilot Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an…CVE-2026-85885 CVE 8.8 Research disclosed nvd.nist.gov
Microsoft365 Copilot Chat Improper neutralization of special elements used in a command ('command injection') in Microsoft 365…CVE-2026-78501 CVE 8.6 Research disclosed nvd.nist.gov
MicrosoftCopilot Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a…CVE-2026-55946 CVE 5.9 Research disclosed nvd.nist.gov
Obsidian Web MCP Prior to 0.2.0, /oauth/authorize issues an authorization code without a login, consent, or session check, and…CVE-2026-54618 CVE 9.4 Fixed nvd.nist.gov
AI Agent Automation Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the…CVE-2026-54520 CVE 8.1 Fixed nvd.nist.gov
AI Agent Automation Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories…CVE-2026-54519 CVE 8.8 Fixed nvd.nist.gov
NetLicensingNetLicensing MCP Server Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key…CVE-2026-54446 CVE 8.1 Fixed nvd.nist.gov
SQLBot Prior to 1.9.0, an authenticated user can supply a crafted sheet["tableName"] value in the Excel datasource…CVE-2026-53557 CVE 7.7 Fixed nvd.nist.gov
SQLBot Prior to 1.9.0, the POST /api/v1/datasource/previewData endpoint in backend/apps/datasourc…CVE-2026-53556 CVE 6.0 Fixed nvd.nist.gov
SQLBot Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH…CVE-2026-53555 CVE 5.1 Fixed nvd.nist.gov
SQLBot Prior to 1.9.0, the POST /api/v1/datasource/parseExcel endpoint in backend/apps/datasource/api/datasource.py…CVE-2026-53554 CVE 7.3 Fixed nvd.nist.gov
Other Prior to 0.10.9, the caption-download MCP tool accepts a caller-controlled file parameter through…CVE-2026-50158 CVE 7.7 Fixed nvd.nist.gov
MKP Prior to 0.4.1, cmd/server/main.go exposes the default HTTP endpoint and pkg/mcp/server.go registers the…CVE-2026-50125 CVE 7.5 Fixed nvd.nist.gov
vLLM vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservationCVE-2026-69147 CVE 6.5 Fixed github.com
RMCP Prior to 2.1.0, the rmcp crate's StreamableHttpClientTransport in crates/rmcp/src/transpor…CVE-2026-64684 CVE 6.8 Fixed nvd.nist.gov
RMCP Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp/src/transp…CVE-2026-63128 CVE 7.5 Fixed nvd.nist.gov
RMCP Prior to 2.0.0, the rmcp crate's OAuth implementation in crates/rmcp/src/transport/auth.rs omits the RFC 9728…CVE-2026-63127 CVE 8.2 Fixed nvd.nist.gov
LiteLLM LiteLLM Proxy has server-side request forgery via the `user_config` request parameterCVE-2026-59823 CVE 5.3 Fixed github.com
vLLM vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completionsCVE-2026-57173 CVE 6.5 Fixed github.com
LMDeploy Starting in version 0.9.1 and prior to version 0.10.2, the LMdeploy implements an rpc server (AsyncRPCServer…CVE-2025-59953 CVE 9.8 Fixed nvd.nist.gov
Atomic Agents Stackatomic-agents-stack atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend…CVE-2026-91988 CVE 8.1 Fixed nvd.nist.gov
FlowiseAIflowise Flowise before 3.1.4 fails to validate baseURL parameters in chat-model nodes, allowing authenticated users…CVE-2026-91935 CVE 8.3 Fixed nvd.nist.gov
FlowiseAIflowise Flowise before 3.1.4 contains a validation bypass vulnerability in MCP server configuration allowing…CVE-2026-91932 CVE 8.5 Fixed nvd.nist.gov
AI Engine The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Insecure…CVE-2026-89141 CVE 6.5 Research disclosed nvd.nist.gov
Other Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlistCVE-2026-61568 CVE 9.6 Fixed nvd.nist.gov
Other Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes all MCP tools without any authenticationCVE-2026-61560 CVE 9.8 Fixed nvd.nist.gov
Version Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENAB…CVE-2026-61559 CVE 9.6 Fixed nvd.nist.gov
FrontMCP From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0…CVE-2026-59973 CVE 8.5 Fixed nvd.nist.gov
MySQLMySQL MCP Server Prior to 0.4.2, setting MCP_TRANSPORT=sse causes src/mysql_mcp_server/server.py to construct…CVE-2026-59971 CVE 10.0 Fixed nvd.nist.gov
STDIO Prior to 1.7.1, web_url_read receives its caller-controlled URL through src/index.ts and validates only the…CVE-2026-58485 CVE 7.1 Fixed nvd.nist.gov
Other Prior to 1.7.1, web_url_read in src/index.ts passes a caller-supplied URL to readUrlContent() in…CVE-2026-58483 CVE 7.5 Fixed nvd.nist.gov
Lokka Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to…CVE-2026-58201 CVE 8.7 Fixed nvd.nist.gov
ToolHive Prior to 0.31.0, remote.Handler.Authenticate in pkg/auth/remote/handler.go invokes discove…CVE-2026-58196 CVE 4.7 Fixed nvd.nist.gov
MCPVault Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git…CVE-2026-57442 CVE 6.9 Fixed nvd.nist.gov
MCPVault Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and…CVE-2026-57441 CVE 8.4 Fixed nvd.nist.gov
MCP Gateway MCP Gateway allows easy and secure running and deployment of MCP serversCVE-2026-55887 CVE 8.7 Fixed nvd.nist.gov
Other Prior to 1.2.0, the web_url_read URL policy in src/url-reader.ts can be bypassed while MCP_HTTP_HARDEN is…CVE-2026-54689 CVE 6.3 Fixed nvd.nist.gov
Other Prior to 1.2.0, web_url_read passes a caller-supplied URL to the server-side fetch path while…CVE-2026-54688 CVE 6.5 Fixed nvd.nist.gov
MCP Memory Keeper Prior to 0.13.0, context_import in src/index.ts passes the caller-controlled filePath directly to…CVE-2026-54561 CVE 6.2 Fixed nvd.nist.gov
MetaMeta Ads MCP Prior to version 1.0.115, the upload_ad_image tool in meta_ads_mcp/core/ads.py passes an attacker-controlled…CVE-2026-54549 CVE 8.3 Fixed nvd.nist.gov
MetaMeta Ads MCP Prior to version 1.0.115, AuthInjectionMiddleware in meta_ads_mcp/core/http_auth_integration.py rejects HTTP…CVE-2026-54547 CVE 7.4 Fixed nvd.nist.gov
ToolHive Prior to 0.29.1, networking.IsPrivateIP in pkg/networking/utilities.go omits the IPv6 NAT64 prefixes…CVE-2026-54450 CVE 2.9 Fixed nvd.nist.gov
ContentfulContentful MCP Server Prior to @contentful/mcp-server 1.7.19 and @contentful/mcp-tools 0.4.5, export_space and import_space in…CVE-2026-53957 CVE 7.7 Fixed nvd.nist.gov
Other LangBot's plugin runtime (pip package langbot_plugin) through 0.4.17 starts a debug WebSocket server on…CVE-2026-90938 CVE 8.6 Research disclosed nvd.nist.gov
MCP Atlassian From 0.17.0 until 0.22.0, validate_url_for_ssrf resolves the attacker-controlled X-Atlassian-Jira-Url and…CVE-2026-73497 CVE 6.5 Fixed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, the confluence_upload_attachment and confluence_upload_attachments tools pass a…CVE-2026-73496 CVE 7.7 Fixed nvd.nist.gov
PraisonAI Prior to 4.6.62, src/praisonai/praisonai/tools/multiedit.py passes the LLM-controlled filepath parameter…CVE-2026-57145 CVE 9.1 Fixed nvd.nist.gov
PraisonAI Prior to praisonaiagents 1.6.59, src/praisonai-agents/praisonaiagents/tools/email_tools.py interpolates…CVE-2026-57130 CVE 8.1 Fixed nvd.nist.gov
Other Prior to 1.20.0, the local OAuth helper in src/dbt_mcp/oauth/fastapi_app.py exposes GET /dbt_platform_context…CVE-2026-55837 CVE 6.8 Fixed nvd.nist.gov
Oraios AI Serena In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0CVE-2026-38924 CVE 2.9 Fixed nvd.nist.gov
Langflow IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP…CVE-2026-12763 CVE 4.2 Research disclosed nvd.nist.gov
vLLM vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader…CVE-2026-90553 CVE — Fixed osv.dev
FlowiseAIflowise In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name endpoint is mounted without…CVE-2026-90534 CVE 6.5 Fixed nvd.nist.gov
Other Headroom compresses data before the data reaches a large language modelCVE-2026-71416 CVE 8.8 Fixed nvd.nist.gov
Knowns knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the project root…CVE-2026-88938 CVE 6.5 Research disclosed nvd.nist.gov
AnythingLLM In 1.16.1 and earlier, the manager role can store meta_page_title or meta_page_favicon through…CVE-2026-88055 CVE 5.5 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI: Users denied by the OAuth role policy can still sign in via token exchangeCVE-2026-88006 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchangeCVE-2026-88005 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetchCVE-2026-87999 CVE 7.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletionCVE-2026-87998 CVE 7.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Any authenticated user can inject chats into another user's folder via chat completionsCVE-2026-87997 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loaderCVE-2026-87996 CVE 7.7 Fixed github.com
Open WebUIopen-webui Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-originCVE-2026-87995 CVE 8.7 Fixed github.com
Open WebUIopen-webui Open WebUI: Channel members can overwrite another member's message via the chat completions endpointCVE-2026-87994 CVE 4.3 Fixed github.com
AmazonAWS Security Agent MCP A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might…CVE-2026-87913 CVE 5.9 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector…CVE-2026-87017 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLiteCVE-2026-87016 CVE 8.1 Fixed github.com
Open WebUIopen-webui Open WebUI: A user's session cookies are sent to tool servers configured for bearer authenticationCVE-2026-87015 CVE 6.8 Fixed github.com
Open WebUIopen-webui Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notesCVE-2026-87014 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycleCVE-2026-87013 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert valueCVE-2026-87012 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logoutCVE-2026-87011 CVE 7.5 Fixed github.com
n8n n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git…CVE-2026-86995 CVE Medium Fixed github.com
n8n n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId FilterCVE-2026-86994 CVE Medium Fixed github.com
n8n n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership CheckCVE-2026-86993 CVE Medium Fixed github.com
n8n n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment…CVE-2026-86085 CVE Medium Fixed github.com
n8n n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid SessionsCVE-2026-86084 CVE Medium Fixed github.com
n8n n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code ExecutionCVE-2026-86083 CVE High Fixed github.com
n8n n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model NodeCVE-2026-86082 CVE High Fixed github.com
n8n n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone PathCVE-2026-86081 CVE High Fixed github.com
n8n n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-OpenCVE-2026-86080 CVE Medium Fixed github.com
n8n n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded IdentifiersCVE-2026-86079 CVE Medium Fixed github.com
n8n n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of ServiceCVE-2026-86078 CVE Medium Fixed github.com
n8n n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocketCVE-2026-86077 CVE Medium Fixed github.com
n8n n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code ExecutionCVE-2026-86076 CVE High Fixed github.com
n8n n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration EndpointCVE-2026-86075 CVE High Fixed github.com
n8n n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched ContentCVE-2026-86074 CVE Medium Fixed github.com
n8n n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource SubstitutionCVE-2026-86073 CVE Medium Fixed github.com
Open WebUIopen-webui Open WebUI: Any authenticated user can hang the server via a cyclic chat message historyCVE-2026-88002 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targetsCVE-2026-88001 CVE 5.0 Fixed github.com
Open WebUIopen-webui Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat treeCVE-2026-88000 CVE 6.5 Fixed github.com
Amazon An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon…CVE-2026-87911 CVE 9.6 Fixed nvd.nist.gov
WPBot The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to…CVE-2026-83593 CVE 7.2 Research disclosed nvd.nist.gov
MCP Kotlin SDK In versions 0.7.0 through 0.12.0, `ReadBuffer.append` in `kotlin-sdk-core/src/commonMain/k…CVE-2026-53937 CVE 6.2 Research disclosed nvd.nist.gov
n8n n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller PolicyCVE-2026-86996 CVE Medium Fixed github.com
MicrosoftVisual Studio Code Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker…CVE-2026-81381 CVE 7.5 Research disclosed nvd.nist.gov
MicrosoftVisual Studio Code Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and…CVE-2026-81380 CVE 5.9 Research disclosed nvd.nist.gov
Other NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing…CVE-2026-47625 CVE 7.5 Research disclosed nvd.nist.gov
Other NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive…CVE-2026-16497 CVE 7.5 Research disclosed nvd.nist.gov
Rowboat Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to…CVE-2026-86122 CVE 5.0 Research disclosed nvd.nist.gov
SQL An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server…CVE-2026-85787 CVE 6.5 Fixed nvd.nist.gov
LaVague LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtract…CVE-2026-85694 CVE 8.1 Research disclosed nvd.nist.gov
Chatbot UI Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated…CVE-2026-85693 CVE 6.5 Research disclosed nvd.nist.gov
Other OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the…CVE-2026-85675 CVE 7.5 Research disclosed nvd.nist.gov
Other aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git…CVE-2026-85674 CVE 7.8 Research disclosed nvd.nist.gov
DocsGPT This functionality renders user-supplied prompt data using Jinja templates without input sanitization or…CVE-2026-31020 CVE 9.8 Research disclosed nvd.nist.gov
Other IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit…CVE-2026-19645 CVE 6.5 Research disclosed nvd.nist.gov
Agentimus Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt &amp; MCP for AI Agents <= 1.51.0 versionsCVE-2026-84779 CVE 8.1 Research disclosed nvd.nist.gov
MicrosoftCopilot Studio Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate…CVE-2026-80098 CVE 10.0 Research disclosed nvd.nist.gov
LiteLLM LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing…CVE-2026-84377 CVE 6.5 Fixed github.com
TOON Prior to 2.3.1, decoding attacker-controlled TOON with a __proto__, constructor, or prototype key wrote…CVE-2026-82404 CVE 8.3 Fixed nvd.nist.gov
MLflow MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via…GHSA-gqvg-gmmx-x4hm GHSA 8.8 Fixed github.com
Hugging Facetransformers Hugging Face Transformers downloads custom generation code before trust consentCVE-2026-80047 CVE 7.8 Vendor confirmed github.com
BetterDocs The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is…CVE-2026-75980 CVE 6.4 Fixed nvd.nist.gov
Support Genix The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for…CVE-2026-19806 CVE 8.8 Research disclosed nvd.nist.gov
Other OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain…CVE-2026-19591 CVE 8.8 Research disclosed nvd.nist.gov
Agent Mode In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools…CVE-2026-82217 CVE 8.8 Research disclosed nvd.nist.gov
Other Origin Validation Error vulnerability in ash-project ash_ai allows a malicious web page to bypass the MCP…CVE-2026-81315 CVE 7.4 Fixed nvd.nist.gov
MCPHub Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own (list views and config edits…CVE-2026-79750 CVE 7.7 Fixed nvd.nist.gov
MCPHub Prior to version 1.0.32, MCPHub's SSRF guard in src/utils/ssrf.ts uses a custom isBlockedIpv6 function that…CVE-2026-79749 CVE 7.6 Fixed nvd.nist.gov
MCPHub Prior to version 0.12.15, the POST /api/servers and PUT /api/servers/:name endpoints in MCPHub create/update…CVE-2026-79748 CVE 9.9 Fixed nvd.nist.gov
MCPHub Prior to version 1.0.32, an authenticated non-admin user can register a server pointing at an arbitrary URL…CVE-2026-79747 CVE 7.1 Fixed nvd.nist.gov
MCPHub Prior to version 1.0.31, when a bearer key with accessType: 'servers' (or 'custom') is used against a group…CVE-2026-79746 CVE 8.1 Fixed nvd.nist.gov
MCPHub Prior to version 1.0.32, the built-in prompt and resource controllers perform no role checkingCVE-2026-79745 CVE 7.1 Fixed nvd.nist.gov
MCPHub Prior to version 1.0.29, MCPHub's PUT /api/system-config endpoint (handler updateSystemConfig) performs no…CVE-2026-79744 CVE 8.8 Fixed nvd.nist.gov
MCPHub Prior to version 0.12.13, MCPB File Upload Handler extracts a ZIP file and reads manifest.json from itCVE-2026-79743 CVE 6.9 Fixed nvd.nist.gov
Other browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without…CVE-2026-82640 CVE 5.5 Research disclosed nvd.nist.gov
SiYuan SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts…CVE-2026-82233 CVE 5.7 Fixed nvd.nist.gov
FastGPT In versions prior to 4.15.2, the WeChat (iLink) share-channel endpoints authorize requests using only the…CVE-2026-68929 CVE 9.3 Fixed nvd.nist.gov
MicrosoftEdge Chromium Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat…CVE-2026-58616 CVE 3.0 Research disclosed nvd.nist.gov
Hatchet From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a request's worker ID belongs to…CVE-2026-54746 CVE 6.4 Fixed nvd.nist.gov
Other The Dash MCP server bound its listener to the loopback address but never checked the host a request named…CVE-2026-81102 CVE 3.1 Fixed nvd.nist.gov
Other The fix passes the option explicitly alongside a dependency update; the update alone would not have closed itCVE-2026-81099 CVE 6.8 Research disclosed nvd.nist.gov
Other The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential…CVE-2026-81098 CVE 9.1 Research disclosed nvd.nist.gov
Other ToolUniverse ran caller-supplied Python inside a sandbox that could be escaped, on a server that required no…CVE-2026-81096 CVE 10.0 Fixed nvd.nist.gov
Other A page in a browser could therefore point a name it controlled at the address the server was bound to and…CVE-2026-81095 CVE 6.8 Research disclosed nvd.nist.gov
Other The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the…CVE-2026-81094 CVE 9.1 Research disclosed nvd.nist.gov
Other The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntaxCVE-2026-81093 CVE 8.6 Research disclosed nvd.nist.gov
WebSocket A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated…CVE-2026-37006 CVE 9.8 Fixed nvd.nist.gov
LiteLLM LiteLLM vulnerable to server-side template injection in the /prompts/test endpointCVE-2026-37004 CVE 9.8 Fixed github.com
Other Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injectionCVE-2026-37003 CVE 9.8 Research disclosed nvd.nist.gov
CursorCursor Agent Aurora ransomware operators used Cursor Agent for hands-on exploitationAIS-2026-003 Incident — Research disclosedExploited Exploited gambit.security
vLLM vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement…CVE-2026-78684 CVE — Fixed osv.dev
AmazonAmazon Strands Agents Tools Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents…CVE-2026-78379 CVE 8.1 Fixed nvd.nist.gov
NVIDIANemoClaw NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may…CVE-2026-65105 CVE 8.1 Research disclosed nvd.nist.gov
TypeBot In self-hosted versions prior to 3.18.0, the server-side Send Email integration block allows arbitrary…CVE-2026-62865 CVE 8.7 Fixed nvd.nist.gov
TypeBot In self-hosted versions up to and including 3.17.1, the default passwordless email magic-link authentication…CVE-2026-62862 CVE 9.1 Fixed nvd.nist.gov
TypeBot Prior to 3.18.0, any authenticated non-guest workspace member can remove another workspace's public custom…CVE-2026-62861 CVE 6.4 Fixed nvd.nist.gov
NextcloudNextcloud MCP Server Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in nextcloud_mcp_server/vector/webhook_receiver.py…CVE-2026-55640 CVE 9.1 Fixed nvd.nist.gov
Other Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener…CVE-2026-55637 CVE 8.8 Fixed nvd.nist.gov
API QWED is open-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls…CVE-2026-55585 CVE 8.8 Fixed nvd.nist.gov
Other Prior to 0.6.0, the default security.yaml allows /usr/bin/git, while security.go omits ! from…CVE-2026-55582 CVE 8.4 Fixed nvd.nist.gov
Other Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowed_executables, while security.go…CVE-2026-55581 CVE 8.4 Fixed nvd.nist.gov
Other Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCP_SHELL_SEC_CONFIG_FILE is unset…CVE-2026-55580 CVE 8.6 Fixed nvd.nist.gov
Other Prior to 0.8.2, browser_download writes a fetched response body to join(save_dir, filename) without…CVE-2026-55557 CVE 8.6 Fixed nvd.nist.gov
PraisonAI Prior to praisonai 4.6.58, the MCP HTTP Stream _validate_origin method accepts request_ori…CVE-2026-55529 CVE 6.9 Fixed nvd.nist.gov
Other In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream…CVE-2026-53965 CVE 6.9 Fixed nvd.nist.gov
Lead Generation Contact Widget Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget &amp; AI Chatbot: Chat Button…CVE-2026-78268 CVE 7.5 Research disclosed nvd.nist.gov
Other The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when…CVE-2026-76072 CVE 7.4 Research disclosed nvd.nist.gov
Nopaperforms Niaa-Chatbot A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17…CVE-2022-30983 CVE 6.1 Research disclosed nvd.nist.gov
Other Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request headerCVE-2026-77776 CVE 9.1 Research disclosed nvd.nist.gov
Other Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request…CVE-2026-77775 CVE 8.6 Research disclosed nvd.nist.gov
Omnigent Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or…CVE-2026-62677 CVE 8.8 Fixed nvd.nist.gov
Omnigent Prior to 0.3.0, the shared shell-command parser in omnigent/policies/builtins/_shell.py fails to recognize…CVE-2026-62676 CVE 7.1 Fixed nvd.nist.gov
Omnigent Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bundle and…CVE-2026-62675 CVE 8.8 Fixed nvd.nist.gov
Omnigent Prior to 0.3.0, PUT /sessions/{session_id}/agent checks LEVEL_EDIT permission for a session but does not…CVE-2026-62674 CVE 9.0 Fixed nvd.nist.gov
TensorZero Prior to 2026.6.0, the TensorZero Gateway /internal/object_storage endpoint accepts a caller-supplied JSON…CVE-2026-54457 CVE 7.7 Fixed nvd.nist.gov
CKANCKAN MCP Server A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that…CVE-2026-53509 CVE 5.7 Fixed nvd.nist.gov
Other Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in…CVE-2026-72846 CVE 6.4 Research disclosed nvd.nist.gov
Other Banks generates meaningful LLM prompts using a simple template languageCVE-2026-71492 CVE 6.0 Fixed nvd.nist.gov
MicrosoftAzure Copilot Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose…CVE-2026-69855 CVE 6.5 Research disclosed nvd.nist.gov
LangBot In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration…CVE-2026-54449 CVE 8.8 Research disclosed nvd.nist.gov
Neo.mjs Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the…CVE-2026-18482 CVE 9.8 Research disclosed nvd.nist.gov
AI Agent by SiteGround The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to…CVE-2026-17153 CVE 5.3 Research disclosed nvd.nist.gov
Other Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows…CVE-2026-76832 CVE 8.8 Research disclosed nvd.nist.gov
SplunkModel Context Protocol Server In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute…CVE-2026-76404 CVE 9.1 Research disclosed nvd.nist.gov
Marimo marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that…CVE-2026-75149 CVE 8.8 Fixed nvd.nist.gov
Other CodeWhale versions >= 0.3.27 and < 0.8.64 (published as deepseek-tui >= 0.3.27 and < 0.8.41 on npm and 0.3.27…CVE-2026-75913 CVE 9.3 Fixed nvd.nist.gov
Other CodeWhale (packages codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain a remote code…CVE-2026-75858 CVE 7.8 Fixed nvd.nist.gov
Other CodeWhale versions >= 0.3.10 and < 0.8.64 (published as deepseek-tui >= 0.3.10 and < 0.8.41 on npm and 0.3.10…CVE-2026-75857 CVE 7.0 Fixed nvd.nist.gov
Other ArcadeDB versions 26.4.2 through 26.7.3 contain an authorization bypass vulnerability in the…CVE-2026-75845 CVE 6.3 Fixed nvd.nist.gov
Context7 Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious…CVE-2026-75130 CVE 9.0 Research disclosed nvd.nist.gov
Other The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and…CVE-2026-50143 CVE 8.1 Fixed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute…CVE-2026-47630 CVE 5.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper…CVE-2026-47629 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation…CVE-2026-47628 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversalCVE-2026-47627 CVE 9.8 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute…CVE-2026-47606 CVE 9.1 Research disclosed nvd.nist.gov
MicrosoftMicrosoft Copilot Personal CoSnitch one-click data exfiltration and memory poisoning in Copilot PersonalAIS-2026-002 Incident 7.5 Fixed varonis.com
MemOS In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless…CVE-2026-75110 CVE 9.8 Research disclosed nvd.nist.gov
vLLM vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader…CVE-2026-73560 CVE 6.5 Fixed github.com
vLLM vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output boundsCVE-2026-71486 CVE 4.3 Fixed github.com
MLflow Prior to 3.15.0, CreateModelVersion accepts a run_id or model_id after _validate_source_run() or…CVE-2026-69148 CVE 7.1 Fixed nvd.nist.gov
MLflow From 3.13.0 until 3.15.0, LogInputs is absent from BEFORE_REQUEST_HANDLERS in the mlflow/server/auth package…CVE-2026-69146 CVE 6.5 Fixed nvd.nist.gov
MLflow MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated…CVE-2026-64849 CVE 9.3 FixedExploited Exploited github.com
CKANCKAN MCP Server Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped…CVE-2026-73846 CVE 6.5 Fixed nvd.nist.gov
CKANCKAN MCP Server Prior to 0.4.112, the ckan_get_mqa_quality and ckan_get_mqa_quality_details tools in src/tools/quality.ts use…CVE-2026-73845 CVE 5.3 Fixed nvd.nist.gov
CKANCKAN MCP Server Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to…CVE-2026-73844 CVE 3.7 Fixed nvd.nist.gov
MindsDB Minds Platform MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution…CVE-2026-73678 CVE 10.0 Research disclosed nvd.nist.gov
Other The Cortex MCP server (`neuro-cortex-memory`), a cross-platform persistent memory MCP, prior to version…CVE-2026-49986 CVE 7.1 Fixed nvd.nist.gov
Trigger.dev From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl() and Aws4FetchClient.presign() in a…CVE-2026-73658 CVE 8.2 Fixed nvd.nist.gov
Trigger.dev From 4.4.2 until 4.5.0-rc.4, `POST /api/v1/runs/:runParam/replay` in apps/webapp/app/route…CVE-2026-73657 CVE 4.2 Fixed nvd.nist.gov
Trigger.dev Prior to 4.5.6, POST /api/v1/deployments/:deploymentId/background-workers calls CreateDepl…CVE-2026-73656 CVE 9.9 Fixed nvd.nist.gov
Trigger.dev Prior to 4.5.2, addGoogleStrategy() in apps/webapp/app/services/googleAuth.server.ts passes a Google profile…CVE-2026-73655 CVE 7.4 Fixed nvd.nist.gov
Trigger.dev From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled…CVE-2026-73654 CVE 8.5 Fixed nvd.nist.gov
vLLM vLLM: Completion prompt lists fan out into unbounded engine requestsCVE-2026-73559 CVE 6.5 Fixed github.com
vLLM vLLM: Cross-User Data Leak VulnerabilityCVE-2026-73558 CVE 5.3 Fixed github.com
vLLM vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt partsCVE-2026-73557 CVE 5.3 Fixed github.com
vLLM vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed…CVE-2026-73556 CVE 5.3 Fixed github.com
vLLM vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error MessagesCVE-2026-73555 CVE 5.3 Fixed github.com
FlowiseAIflowise Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator BypassCVE-2026-73487 CVE 9.8 Fixed github.com
Other AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any…CVE-2026-72776 CVE 9.8 Research disclosed nvd.nist.gov
Other Version 3.0.1 implements SSRF protection in `assertSafeUrl()` (`src/security.ts`) to block requests to…CVE-2026-49857 CVE 7.4 Research disclosed nvd.nist.gov
Other In version 0.3.1, he network domain has a central SSRF authorization policy that blocks private, loopback…CVE-2026-49856 CVE 4.3 Research disclosed nvd.nist.gov
Other HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in…CVE-2026-21832 CVE 4.3 Research disclosed nvd.nist.gov
Model Context Protocol A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0CVE-2026-19753 CVE 7.3 Research disclosed nvd.nist.gov
MCP Atlassian Prior to 0.22.0, confluence_upload_attachment passes its client-supplied file_path directly to…CVE-2026-73498 CVE 7.7 Fixed nvd.nist.gov
Prompty Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template…CVE-2026-73299 CVE 10.0 Fixed nvd.nist.gov
ToolJet Prior to 3.20.207, the ToolJet Database HTTP API in server/src/modules/tooljet-db/controller.ts authorizes…CVE-2026-73068 CVE 5.9 Fixed nvd.nist.gov
PDFs PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute…CVE-2026-73032 CVE 9.6 Research disclosed nvd.nist.gov
MicrosoftVisual Studio Code Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot…CVE-2026-70335 CVE 7.8 Research disclosed nvd.nist.gov
MicrosoftGithub Copilot Chat No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass…CVE-2026-65675 CVE 6.5 Research disclosed nvd.nist.gov
TypeBot Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets…CVE-2026-48767 CVE 7.6 Fixed nvd.nist.gov
TypeBot Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to exfiltrate stored…CVE-2026-48766 CVE 7.6 Fixed nvd.nist.gov
TypeBot Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth `credentialsId`…CVE-2026-48765 CVE 9.9 Fixed nvd.nist.gov
TypeBot Versions prior to 3.17.0 expose a deprecated public upload endpoint at `GET /api/v1/typebo…CVE-2026-48763 CVE 8.2 Fixed nvd.nist.gov
TypeBot Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a user-supplied audio URL…CVE-2026-48762 CVE 5.4 Fixed nvd.nist.gov
TypeBot Prior to version 3.17.0, the Google Sheets OAuth callback decodes a base64-encoded JSON `state` parameter and…CVE-2026-48495 CVE 7.1 Fixed nvd.nist.gov
TypeBot In version 3.16.1, an authenticated user who has read access to any typebot can resume a WhatsApp preview…CVE-2026-48494 CVE 7.1 Research disclosed nvd.nist.gov
TypeBot Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a workspace-configured webhook…CVE-2026-48483 CVE 5.4 Fixed nvd.nist.gov
TypeBot Version 3.16.1 has a CSV injection vulnerability in the result export functionalityCVE-2026-47705 CVE 9.6 Research disclosed nvd.nist.gov
TypeBot Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting…CVE-2026-47704 CVE 7.1 Fixed nvd.nist.gov
TypeBot In version 3.16.1, API tokens (bearer credentials used to authenticate against the builder API) are stored in…CVE-2026-47702 CVE 9.1 Research disclosed nvd.nist.gov
TypeBot Prior to version 3.17.0, the `handleGetSheets` API handler (`POST /api/sheets/getSheets`) does not validate…CVE-2026-42142 CVE 7.1 Fixed nvd.nist.gov
Other Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may…CVE-2026-28707 CVE 5.4 Fixed nvd.nist.gov
IntelLLM Library for PyTorch Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may…CVE-2026-21387 CVE 6.5 Research disclosed nvd.nist.gov
IntelLlm Scaler Vllm Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an…CVE-2026-20755 CVE 6.7 Research disclosed nvd.nist.gov
AnythingLLM From 1.0.0 to 1.15.0, AnythingLLM's unauthenticated account-recovery flow in server/utils/…CVE-2026-72917 CVE 5.9 Fixed nvd.nist.gov
Firecrawl Firecrawl turns entire websites into LLM-ready markdown or structured dataCVE-2026-72904 CVE 9.3 Fixed nvd.nist.gov
Other goose is general-purpose AI agent that runs on your machineCVE-2026-72718 CVE 7.0 Fixed nvd.nist.gov
Other The AI Engine WordPress plugin before 3.6.4 does not verify ownership of a guest's uploaded chatbot files…CVE-2026-16953 CVE 4.8 Fixed nvd.nist.gov
AI Copilot The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions…CVE-2026-14526 CVE 9.8 Research disclosed nvd.nist.gov
LightRAG Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled…CVE-2026-61808 CVE 9.8 Research disclosed nvd.nist.gov
MicrosoftPower Apps Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a networkCVE-2026-59118 CVE 9.3 Research disclosed nvd.nist.gov
MetaMeta Ads MCP Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integration.py:272`…CVE-2026-48039 CVE 9.1 Fixed nvd.nist.gov
FlowiseAIflowise Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace…CVE-2026-67621 CVE 7.6 Research disclosed nvd.nist.gov
FrontMCP Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema instances to the script via…CVE-2026-67531 CVE 9.3 Fixed nvd.nist.gov
AmazonAmazon Strands Agents Tools Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon…CVE-2026-19111 CVE 8.1 Fixed nvd.nist.gov
Kino-Kafkaesque A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5CVE-2026-19039 CVE 5.3 Research disclosed nvd.nist.gov
Langflow IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during…CVE-2026-9196 CVE 8.8 Fixed nvd.nist.gov
Langflow IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only…CVE-2026-9077 CVE 8.5 Research disclosed nvd.nist.gov
Langflow IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context…CVE-2026-8446 CVE 7.5 Research disclosed nvd.nist.gov
MLflow MLflow AI Gateway permits SSRF through an unvalidated api_baseCVE-2026-71211 CVE 7.1 Vendor confirmed github.com
AI Chatbot & Workflow Automation by AIWU The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Sensitive Information…CVE-2026-6639 CVE 7.5 Research disclosed nvd.nist.gov
AmazonDocumentDB MCP Server Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before…CVE-2026-18954 CVE 5.5 Fixed nvd.nist.gov
Langflow IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or…CVE-2026-17626 CVE 8.8 Research disclosed nvd.nist.gov
Langflow IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary…CVE-2026-17623 CVE 8.8 Research disclosed nvd.nist.gov
FlowiseAIflowise Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object…GHSA-88pr-878c-24wf GHSA High Fixed github.com
FlowiseAIflowise Flowise: Incomplete Credential Redaction Exposes Secrets via APICVE-2026-73604 CVE 6.5 Fixed github.com
FlowiseAIflowise Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private…CVE-2026-73603 CVE Medium Fixed github.com
FlowiseAIflowise Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpointCVE-2026-73488 CVE Medium Fixed github.com
Open WebUIopen-webui Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared…CVE-2026-70494 CVE 8.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks…CVE-2026-70493 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messagesCVE-2026-70492 CVE 8.7 Fixed github.com
Open WebUIopen-webui Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpointsCVE-2026-70491 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role checkCVE-2026-70490 CVE 6.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsingCVE-2026-70489 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanupCVE-2026-70488 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadataCVE-2026-70487 CVE 5.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-originCVE-2026-70486 CVE 8.2 Fixed github.com
Open WebUIopen-webui Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLsCVE-2026-70485 CVE 7.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Users denied the image-generation permission can still generate images via chat completionsCVE-2026-70484 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpointCVE-2026-70483 CVE 3.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any clientCVE-2026-70482 CVE 8.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Any member with write access to a standard channel can edit or delete other members' messagesCVE-2026-70481 CVE 5.4 Fixed github.com
Open WebUIopen-webui Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart renderingCVE-2026-70480 CVE 4.1 Fixed github.com
Open WebUIopen-webui Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loaderCVE-2026-70479 CVE 7.7 Fixed github.com
FlowiseAIflowise Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any…CVE-2026-70478 CVE 10.0 Fixed github.com
FlowiseAIflowise Flowise: CSV Agent Prompt Injection Remote Code Execution VulnerabilityCVE-2026-70477 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing ManipulationCVE-2026-70476 CVE 8.2 Fixed github.com
FlowiseAIflowise Flowise: Missing Authorization on Execution Update EndpointCVE-2026-70475 CVE 6.5 Fixed github.com
FlowiseAIflowise Flowise: Cross-Workspace OAuth2 Credential Metadata LeakCVE-2026-70474 CVE 8.1 Fixed github.com
FlowiseAIflowise Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert historyCVE-2026-70473 CVE 8.5 Fixed github.com
FlowiseAIflowise Flowise: Cross-workspace credential IDOR in openai-assistants-vector-storeCVE-2026-70472 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables DisclosureCVE-2026-70471 CVE 6.5 Fixed github.com
FlowiseAIflowise Flowise: Pyodide validator Unicode homoglyph bypass leads to RCECVE-2026-70470 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without…CVE-2026-69264 CVE Critical Fixed github.com
FlowiseAIflowise Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist…CVE-2026-69263 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and…CVE-2026-69262 CVE 8.1 Fixed github.com
FlowiseAIflowise Flowise RCE via SQLite Record Manager NodeCVE-2026-69259 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread…CVE-2026-69258 CVE 9.1 Fixed github.com
FlowiseAIflowise Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 AddressesCVE-2026-69257 CVE 8.6 Fixed github.com
FlowiseAIflowise Flowise: Remote Code Execution Vulnerability in CSVAgentCVE-2026-69256 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell VerifiedCVE-2026-69255 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions OverrideCVE-2026-69254 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise Sandbox Escape to RCECVE-2026-69253 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files…CVE-2026-69252 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise RCE via TypeORM DataSourceCVE-2026-69251 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret ExfiltrationCVE-2026-69250 CVE 7.5 Fixed github.com
Open WebUIopen-webui Open WebUI: DNS Rebinding SSRF BypassCVE-2026-54020 CVE 6.3 Fixed github.com
Emlog Pro Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in i…CVE-2026-67598 CVE 7.4 Research disclosed nvd.nist.gov
Ouroboros Versions prior to 0.42.1 have an incomplete denylistCVE-2026-66065 CVE 8.4 Fixed nvd.nist.gov
AmazonAmazon Strands Agents Tools A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow…CVE-2026-18733 CVE 8.8 Fixed nvd.nist.gov
RabbitMQ Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP…CVE-2026-18655 CVE 6.5 Fixed nvd.nist.gov
Hugging Facetransformers Transformers save_pretrained path traversal allows arbitrary file writes through chat template namesCVE-2026-9856 CVE 7.1 Fixed github.com
Other The AI ChatBot for WooCommerce WordPress plugin before 4.8.4 does not perform any authorization or nonce…CVE-2026-15241 CVE 7.5 Fixed nvd.nist.gov
AI Engine The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to…CVE-2026-15988 CVE 8.8 Research disclosed nvd.nist.gov
Other From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files…CVE-2026-54785 CVE 6.2 Fixed nvd.nist.gov
Strands Agents Tools Incorrect authorization in the http_request tool in Strands Agents Tools before 0.8.2 might allow remote…CVE-2026-18394 CVE 7.4 Fixed nvd.nist.gov
pgAdminpgAdmin 4 The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's…CVE-2026-17351 CVE 9.0 Fixed nvd.nist.gov
Other Banks generates meaningful LLM prompts using a simple template languageCVE-2026-62663 CVE 7.5 Fixed nvd.nist.gov
Other Banks generates meaningful LLM prompts using a simple template languageCVE-2026-61536 CVE 7.5 Fixed nvd.nist.gov
MCP Ruby SDK Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem reads and parses an entire…CVE-2026-67432 CVE 7.5 Fixed nvd.nist.gov
MCP Ruby SDK Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not bind a session ID…CVE-2026-67431 CVE 8.3 Fixed nvd.nist.gov
MCP Ruby SDK Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not expire sessions by…CVE-2026-67430 CVE 5.3 Fixed nvd.nist.gov
MCP Ruby SDK Prior to 0.23.0, MCP::Server::Transports::StdioTransport and MCP::Client::Stdio in the mcp gem use IO#gets…CVE-2026-63119 CVE 6.2 Fixed nvd.nist.gov
MCP Ruby SDK Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not validate the HTTP…CVE-2026-63118 CVE 6.9 Fixed nvd.nist.gov
Other Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke…CVE-2026-9680 CVE 5.8 Research disclosed nvd.nist.gov
GitHubMCP Server GitHub MCP Server is GitHub's official MCP ServerCVE-2026-47427 CVE 7.5 Fixed nvd.nist.gov
ChatBot The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including…CVE-2026-16774 CVE 5.3 Research disclosed nvd.nist.gov
WPBot The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to…CVE-2026-16773 CVE 5.3 Research disclosed nvd.nist.gov
Other Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and…CVE-2026-17534 CVE 5.5 Fixed nvd.nist.gov
nanocoai NanoClaw A vulnerability was detected in nanocoai NanoClaw up to 2.0.64CVE-2026-17433 CVE 5.3 Research disclosed nvd.nist.gov
Suna Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows…CVE-2026-66027 CVE 8.3 Fixed nvd.nist.gov
BlenderMCP BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset…CVE-2026-66004 CVE 5.3 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update…CVE-2026-59715 CVE 3.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)CVE-2026-59714 CVE 7.1 Fixed github.com
Open WebUIopen-webui Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation…CVE-2026-59227 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocationCVE-2026-59226 CVE 3.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Arena task endpoints can bypass underlying model access controlsCVE-2026-59225 CVE 5.4 Fixed github.com
Open WebUIopen-webui Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id…CVE-2026-59224 CVE 8.0 Fixed github.com
Open WebUIopen-webui Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary…CVE-2026-59223 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentialsCVE-2026-59222 CVE Medium Fixed github.com
Open WebUIopen-webui open-webui terminal proxy path traversal guard bypass via 9x encoded traversalCVE-2026-59221 CVE 7.7 Fixed github.com
Open WebUIopen-webui Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default configCVE-2026-59220 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logoutCVE-2026-59219 CVE 7.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Account enumeration via observable login timing discrepancyCVE-2026-59218 CVE 5.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users…CVE-2026-59217 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_idCVE-2026-59216 CVE 7.7 Fixed github.com
Open WebUIopen-webui Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id bindingCVE-2026-59215 CVE 3.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Stored web worker XSS via PyodideCVE-2026-59214 CVE 7.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs…CVE-2026-59213 CVE 3.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/deleteCVE-2026-59212 CVE 5.4 Fixed github.com
Microsoft365 Copilot Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a networkCVE-2026-50517 CVE 9.9 Research disclosed nvd.nist.gov
Other SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability in the…CVE-2026-65701 CVE 9.1 Research disclosed nvd.nist.gov
AgentGPT AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows…CVE-2026-65699 CVE 4.2 Research disclosed nvd.nist.gov
Void Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows…CVE-2026-65698 CVE 5.3 Research disclosed nvd.nist.gov
Redis APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP server…CVE-2026-47769 CVE 5.3 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on…CVE-2026-45339 CVE 6.5 Fixed osv.dev
AmazonAWS API MCP Server Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow…CVE-2026-16584 CVE 7.0 Fixed nvd.nist.gov
AI Copilot The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via…CVE-2026-13009 CVE 6.5 Research disclosed nvd.nist.gov
n8n n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected…CVE-2026-72775 CVE Medium Fixed github.com
n8n n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`CVE-2026-72774 CVE High Fixed github.com
n8n n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base DirectoryCVE-2026-72773 CVE Medium Fixed github.com
n8n n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed LoginCVE-2026-72772 CVE High Fixed github.com
n8n n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM NodesCVE-2026-72771 CVE 6.5 Fixed github.com
n8n n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path RestrictionCVE-2026-72770 CVE High Fixed github.com
n8n n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of ServiceCVE-2026-72769 CVE Medium Fixed github.com
n8n n8n: SSRF Protection Bypass via MCP Client NodeCVE-2026-72768 CVE Medium Fixed github.com
n8n n8n: Authenticated code execution in the n8n Git nodeCVE-2026-72767 CVE High Fixed github.com
n8n n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type ConfusionCVE-2026-72766 CVE High Fixed github.com
n8n n8n: Expression sandbox escape via arrow-function bodies enabling command executionCVE-2026-72765 CVE High Fixed github.com
n8n n8n: Cross-Tenant Module-Cache Poisoning in the JS Task RunnerCVE-2026-72764 CVE Medium Fixed github.com
n8n n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSONCVE-2026-72763 CVE High Fixed github.com
n8n n8n: Edit Image Node Format Injection Allows Arbitrary File WriteCVE-2026-72762 CVE High Fixed github.com
n8n n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression InterpolationCVE-2026-72750 CVE Medium Fixed github.com
n8n n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of ServiceCVE-2026-72749 CVE High Fixed github.com
n8n n8n: Google Service Account Private Key Exposed in JWT HeaderCVE-2026-65599 CVE Medium Fixed github.com
n8n n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code ExecutionCVE-2026-65598 CVE High Fixed github.com
n8n n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML PreviewCVE-2026-65597 CVE High Fixed github.com
n8n n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" RestrictionCVE-2026-65596 CVE Medium Fixed github.com
n8n n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTsCVE-2026-65595 CVE High Fixed github.com
n8n n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization…CVE-2026-65594 CVE 6.5 Fixed github.com
n8n n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network AccessCVE-2026-65593 CVE Medium Fixed github.com
n8n n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`CVE-2026-65592 CVE High Fixed github.com
n8n n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code ExecutionCVE-2026-65591 CVE High Fixed github.com
n8n n8n: computer-use Shell Sandbox Not Enforced on Linux and WindowsCVE-2026-65590 CVE Medium Fixed github.com
n8n n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution DataCVE-2026-65589 CVE 6.5 Fixed github.com
n8n n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance OwnerCVE-2026-65016 CVE High Fixed github.com
n8n n8n: AI Agents Project Viewer Privilege Escalation via run_node_toolCVE-2026-65015 CVE 8.8 Fixed github.com
n8n n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test WebhookCVE-2026-65014 CVE Medium Fixed github.com
n8n n8n: External Secrets Permission Bypass via Expression Parser MismatchCVE-2026-59259 CVE Medium Fixed github.com
n8n n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression InterpolationCVE-2026-59257 CVE Medium Fixed github.com
n8n n8n: External Secrets Accessible via Workflow Expressions Outside CredentialsCVE-2026-59254 CVE Medium Fixed github.com
n8n n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other ProjectsCVE-2026-59253 CVE Medium Fixed github.com
n8n n8n: Shared Credential Header Leak via HTTP Request Pagination ExpressionCVE-2026-59209 CVE High Fixed github.com
n8n n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity ResolutionCVE-2026-59208 CVE High Fixed github.com
n8n n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project EnumerationCVE-2026-59206 CVE High Fixed github.com
n8n n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File UploadsCVE-2026-58661 CVE Medium Fixed github.com
Ansible Lightspeed Model Context Protocol A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) serverCVE-2026-44192 CVE 6.6 Research disclosed nvd.nist.gov
Mcp Webresearchmcp-webresearch mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access…CVE-2026-65056 CVE 8.2 Research disclosed nvd.nist.gov
MCP-for-Stata Prior to version 1.17.3, the `log_file_name` parameter in the `stata_do` API and CLI is directly interpolated…CVE-2026-47708 CVE 9.3 Fixed nvd.nist.gov
PraisonAI CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-generator (`pra…CVE-2026-47393 CVE 9.8 Fixed nvd.nist.gov
PraisonAI Prior to version 4.6.40, PraisonAI's first-party A2A server example exposes an unauthenticated A2A JSON-RPC…CVE-2026-47391 CVE 9.8 Fixed nvd.nist.gov
Other AgenticMail gives AI agents real email addresses and phone numbersCVE-2026-57495 CVE 8.2 Fixed nvd.nist.gov
Other AgenticMail gives AI agents real email addresses and phone numbersCVE-2026-57494 CVE 7.1 Fixed nvd.nist.gov
Other AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32…CVE-2026-47255 CVE 8.2 Fixed nvd.nist.gov
Other nono is software that allows users to run AI agents in a zero-latency sandboxCVE-2026-47128 CVE 6.1 Fixed nvd.nist.gov
VerygoodpluginsWhatsApp MCP Server Prior to version 0.2.1, the `whatsapp-bridge` HTTP API listens on `127.0.0.1:8080` without authentication and…CVE-2026-46555 CVE 7.1 Fixed nvd.nist.gov
Other The AI Copilot WordPress plugin before 1.5.4 does not bind OAuth access tokens to a WordPress user, and…CVE-2026-9810 CVE 9.8 Fixed nvd.nist.gov
Langflow IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918…CVE-2026-9135 CVE 9.9 Research disclosed nvd.nist.gov
Langflow IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation…CVE-2026-7755 CVE 8.8 Research disclosed nvd.nist.gov
Agentic-Flow Prior to 2.0.14, agentic-flow MCP server tools in src/mcp/standalone-stdio.ts, src/mcp/fas…CVE-2026-58195 CVE 8.8 Fixed nvd.nist.gov
Other ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically loads and executes the MCP…CVE-2026-57860 CVE 7.8 Research disclosed nvd.nist.gov
IBMCognos Analytics IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to…CVE-2026-15995 CVE 4.2 Research disclosed nvd.nist.gov
Aimogen Pro The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is…CVE-2026-15982 CVE 9.8 Research disclosed nvd.nist.gov
AmazonAWS HealthOmics Improper limitation of a pathname to a restricted directory in the linting tools of the AWS HealthOmics MCP…CVE-2026-15415 CVE 5.5 Fixed nvd.nist.gov
IBMAgentics IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code…CVE-2026-14501 CVE 9.8 Research disclosed nvd.nist.gov
Kiota Prior to 1.29.1 and 1.32.5, `kiota plugin add` and `kiota plugin generate` (with `-t APIPlugin`) emitted…CVE-2026-59864 CVE 9.3 Fixed nvd.nist.gov
Prompty Prior to 2.0.0-beta.2, Prompty loaders expanded ${file:...} references in .prompty frontmatter without…CVE-2026-53598 CVE 7.5 Fixed nvd.nist.gov
Prompty From 2.0.0-alpha.1 until 2.0.0-beta.3, the @prompty/core TypeScript loader in runtime/type…CVE-2026-53597 CVE 8.7 Fixed nvd.nist.gov
Claude Code Action Prior to 1.0.74, because the action checked out attacker-controlled pull request head branches, read…CVE-2026-47751 CVE 5.3 Fixed nvd.nist.gov
Other The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and…CVE-2026-46341 CVE 6.1 Fixed nvd.nist.gov
GetdbtDbt Mcp Server Prior to 1.17.1, DefaultUsageTracker.emit_tool_called_event() in src/dbt_mcp/tracking/tracking.py serialized…CVE-2026-44970 CVE 4.3 Fixed nvd.nist.gov
GetdbtDbt Mcp Server Prior to 1.17.1, DbtMCP.call_tool() in src/dbt_mcp/mcp/server.py logged the raw arguments dictionary at INFO…CVE-2026-44969 CVE 3.3 Fixed nvd.nist.gov
GetdbtDbt Mcp Server Prior to 1.17.1, _run_dbt_command() in src/dbt_mcp/dbt_cli/tools.py appended unsanitized node_selection and…CVE-2026-44968 CVE 6.3 Fixed nvd.nist.gov
AmazonAWS Bedrock AgentCore Python SDK Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore…CVE-2026-15737 CVE 5.7 Fixed nvd.nist.gov
WPBot The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to…CVE-2026-15610 CVE 4.3 Research disclosed nvd.nist.gov
WPBot The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to…CVE-2026-15106 CVE 5.3 Research disclosed nvd.nist.gov
MxChat The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored…CVE-2026-13005 CVE 4.4 Research disclosed nvd.nist.gov
Other The AI Engine WordPress plugin before 3.5.5 does not verify that a user owns the chatbot conversation…CVE-2026-12510 CVE 5.9 Fixed nvd.nist.gov
Other The BetterDocs WordPress plugin before 4.5.5 does not sanitise an AI-generated documentation summary before…CVE-2026-11371 CVE 6.1 Fixed nvd.nist.gov
Hugging FaceHugging Face Hub infrastructure Autonomous AI agent intrusion into Hugging Face production infrastructureAIS-2026-001 Incident — Vendor confirmedExploited Exploited huggingface.co
Model Context Protocolmcp MCP Python SDK: WebSocket server transport does not support Host/Origin validationCVE-2026-59950 CVE 8.1 Fixed github.com
n8n-MCP Prior to 2.57.4, multi-tenant HTTP mode with ENABLE_MULTI_TENANT=true could allow an authenticated tenant to…CVE-2026-55608 CVE 5.4 Fixed nvd.nist.gov
n8n-MCP Prior to 2.56.1, in HTTP mode with multi-tenancy enabled through ENABLE_MULTI_TENANT=true, n8n-mcp's local…CVE-2026-54052 CVE 9.9 Fixed nvd.nist.gov
Model Context Protocolmcp MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasksCVE-2026-52870 CVE 7.6 Fixed github.com
Model Context Protocolmcp MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principalCVE-2026-52869 CVE 7.1 Fixed github.com
YamadashyRepomix Prior to 1.14.1, the Repomix MCP server attach_packed_output and read_repomix_output flow can register and…CVE-2026-49988 CVE 5.5 Fixed nvd.nist.gov
LiteLLM LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionalityCVE-2026-30623 CVE 9.8 Research disclosed nvd.nist.gov
Strands Agents The strands-agents-tools package provides pre-built tools for use with the SDK, including the…CVE-2026-15746 CVE 6.5 Fixed nvd.nist.gov
GrafanaGrafana MCP Server A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the…CVE-2026-15583 CVE 8.6 Research disclosed nvd.nist.gov
Microsoft365 Copilot Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate…CVE-2026-58617 CVE 9.8 Research disclosed nvd.nist.gov
MicrosoftCopilot Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows…CVE-2026-55145 CVE 7.1 Research disclosed nvd.nist.gov
MicrosoftGithub Copilot Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker…CVE-2026-50510 CVE 7.8 Research disclosed nvd.nist.gov
Microsoft365 Copilot Improper neutralization of special elements used in a command ('command injection') in Copilot Chat…CVE-2026-48561 CVE 9.6 Research disclosed nvd.nist.gov
Other NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release…CVE-2026-47482 CVE 7.5 Research disclosed nvd.nist.gov
Other NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an…CVE-2026-47481 CVE 6.5 Research disclosed nvd.nist.gov
Other NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught…CVE-2026-47480 CVE 7.5 Research disclosed nvd.nist.gov
Other NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled…CVE-2026-47479 CVE 7.5 Research disclosed nvd.nist.gov
Other NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an…CVE-2026-47478 CVE 7.5 Research disclosed nvd.nist.gov
Other NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based…CVE-2026-47477 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled…CVE-2026-47476 CVE 7.5 Research disclosed nvd.nist.gov
MicrosoftVisual Studio Code Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker…CVE-2026-47282 CVE 6.5 Research disclosed nvd.nist.gov
AmazonAWS A server-side request forgery in the pagination handling component in AWS awslabs.healthlake-mcp-server…CVE-2026-15643 CVE 7.3 Fixed nvd.nist.gov
AppiumAppium Mcp In versions prior to 1.85.10, the createLocatorGeneratorUI function interpolates attacker-controlled element…CVE-2026-58500 CVE 8.2 Fixed nvd.nist.gov
QuantumCloud ChatBot Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…CVE-2026-57414 CVE 6.5 Research disclosed nvd.nist.gov
QuantumCloud ChatBot Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…CVE-2026-57363 CVE 7.1 Research disclosed nvd.nist.gov
KidocodeCrawl4AI Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow…CVE-2026-56259 CVE 8.2 Fixed nvd.nist.gov
AI Chatbot & Workflow Automation by AIWU The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization bypass in…CVE-2026-6804 CVE 5.3 Research disclosed nvd.nist.gov
AI Chatbot & Workflow Automation by AIWU The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing Authorization in…CVE-2026-6803 CVE 5.3 Research disclosed nvd.nist.gov
PraisonAI PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that…CVE-2026-61447 CVE 10.0 Fixed nvd.nist.gov
PraisonAI PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder…CVE-2026-61445 CVE 9.9 Fixed nvd.nist.gov
PraisonAI PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block…CVE-2026-61439 CVE 7.5 Fixed nvd.nist.gov
ThriveDesk The ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base plugin for WordPress is vulnerable to…CVE-2026-1832 CVE 4.3 Research disclosed nvd.nist.gov
SuyogsMCP Server Kubernetes MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools…CVE-2026-61459 CVE 9.8 Fixed nvd.nist.gov
PraisonAI PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense…CVE-2026-60086 CVE 5.3 Fixed nvd.nist.gov
9Router Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, but op…CVE-2026-56676 CVE 7.4 Fixed nvd.nist.gov
9Router Prior to 0.5.2, 9router determines whether a /v1 LLM proxy request is local by reading the client-controlled…CVE-2026-55641 CVE 8.2 Fixed nvd.nist.gov
9Router Prior to 0.5.2, 9router protects /v1, /v1beta, /api/v1, and /api/v1beta in src/dashboardGuard.js but omits…CVE-2026-55638 CVE 8.6 Fixed nvd.nist.gov
Langroid Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with…CVE-2026-55615 CVE 9.2 Fixed nvd.nist.gov
LangChain4j Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embedding…CVE-2026-55405 CVE 7.6 Fixed nvd.nist.gov
Langroid Versions prior to 0.65.2 are vulnerable to a critical Sandbox Escape leading to Remote Code Execution (RCE)…CVE-2026-54769 CVE 10.0 Fixed nvd.nist.gov
Langroid Prior to version 0.64.0, Langroid's `ReadFileTool` and `WriteFileTool` appear to treat `curr_dir` as the…CVE-2026-50181 CVE 7.1 Fixed nvd.nist.gov
TypeBot Prior to 3.17.2, Typebot's shared SSRF validator in packages/lib/src/ssrf/validateHttpReqUrl.ts can be…CVE-2026-49213 CVE 8.1 Fixed nvd.nist.gov
BetterDocs The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is…CVE-2026-15104 CVE 6.5 Research disclosed nvd.nist.gov
Artificial Intelligence ProjectArtificial Intelligence Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful BrowsingCVE-2026-13237 CVE 4.8 Research disclosed nvd.nist.gov
Artificial Intelligence ProjectArtificial Intelligence Missing Authorization vulnerability in Drupal AI Agents allows Forceful BrowsingCVE-2026-13236 CVE 4.2 Research disclosed nvd.nist.gov
n8n n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP ConnectorCVE-2026-59207 CVE 6.5 Fixed github.com
Hermes WebUI Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated…CVE-2026-58122 CVE 9.1 Fixed nvd.nist.gov
DeepSeekDeepSeek MCP Server Starting in version 1.4.2 and prior to version 1.8.0, the self-hosted HTTP transport of `@…CVE-2026-55605 CVE 5.3 Fixed nvd.nist.gov
DeepSeekDeepSeek MCP Server Starting in version 1.4.2 and prior to version 1.7.0, the process-global `SessionStore` accepts…CVE-2026-55604 CVE 8.6 Fixed nvd.nist.gov
ClarisFileMaker Server An authenticated administrator may be able to achieve arbitrary code execution on the host system by…CVE-2026-43752 CVE 4.9 Fixed nvd.nist.gov
LiteLLM LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough FallbackCVE-2026-59822 CVE 8.2 FixedExploited Exploited github.com
LiteLLM LiteLLM: Custom Code Guardrails production endpoints bypass code safety checksCVE-2026-59821 CVE 7.2 Fixed github.com
LiteLLM LiteLLM: Arbitrary file write via path traversal in Skills archive extractionCVE-2026-59820 CVE 6.5 Fixed github.com
LiteLLM LiteLLM: Local file read via request-supplied OIDC file referencesCVE-2026-59819 CVE 4.9 Fixed github.com
Composio SDK Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to…CVE-2026-59807 CVE 6.8 Fixed nvd.nist.gov
RedhatOpenShift AI A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AICVE-2026-15154 CVE 6.5 Research disclosed nvd.nist.gov
Chatra Live Chat + ChatBot + Cart Saver The Chatra Live Chat + ChatBot + Cart Saver plugin for WordPress is vulnerable to Stored Cross-Site Scripting…CVE-2026-12041 CVE 4.4 Research disclosed nvd.nist.gov
Mem0 mem0 contains unauthenticated config API endpoints that expose LLM API keys in plaintext and allow…CVE-2026-59706 CVE 9.3 Research disclosed nvd.nist.gov
Cognee Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers…CVE-2026-58473 CVE 9.1 Fixed nvd.nist.gov
FastGPT Prior to 4.15.0, GET /api/core/ai/record/getRecord authenticates the caller but loads LLM request and…CVE-2026-54602 CVE 7.1 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI has Blind Server Side Request Forgery in its Image Edit FunctionalityCVE-2026-34225 CVE 4.3 Vendor confirmed github.com
Open WebUIopen-webui Open WebUI vulnerable to Stored XSS via iFrame embeds in response messagesCVE-2026-26193 CVE 7.3 Fixed github.com
Open WebUIopen-webui Open WebUI vulnerable to Stored XSS via iFrame in citations modelCVE-2026-26192 CVE 7.3 Fixed github.com
Open WebUIopen-webui Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full…CVE-2025-46719 CVE High Fixed github.com
Open WebUIopen-webui Open WebUI allows limited stored XSS vila uploaded html fileCVE-2025-46571 CVE Medium Fixed github.com
KidocodeCrawl4AI Prior to 0.9.0, the Docker API server applied its SSRF destination check on the non-streaming /crawl path but…CVE-2026-57573 CVE 8.6 Fixed nvd.nist.gov
KidocodeCrawl4AI Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into…CVE-2026-57572 CVE 10.0 Fixed nvd.nist.gov
KidocodeCrawl4AI Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from…CVE-2026-57571 CVE 9.6 Fixed nvd.nist.gov
vLLM vLLM: Speech-to-text upload size limit is enforced after full UploadFile readCVE-2026-55646 CVE 6.5 Fixed github.com
vLLM vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backendsCVE-2026-55574 CVE 7.5 Fixed github.com
vLLM vLLM denial of service via prompt embeds on M-RoPE modelsCVE-2026-55514 CVE 6.5 Fixed github.com
vLLM vLLM has Remote DoS via Invalid Recovered Token ReinjectionCVE-2026-54234 CVE 7.5 Fixed github.com
SUSE Rancher AI Agent A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API…CVE-2026-44934 CVE 7.0 Fixed nvd.nist.gov
Codex The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responsesCVE-2026-14898 CVE 6.5 Research disclosed nvd.nist.gov
Kong Konnect Model Context Protocol A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which…CVE-2026-13341 CVE 7.4 Fixed nvd.nist.gov
Other The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is…CVE-2026-12734 CVE 6.4 Research disclosed nvd.nist.gov
Other The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is…CVE-2026-12731 CVE 6.4 Research disclosed nvd.nist.gov
Other The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is…CVE-2026-12729 CVE 4.3 Fixed nvd.nist.gov
MLflow MLflow: trace API endpoints lack proper authorization validatorsCVE-2026-8147 CVE 8.1 Fixed github.com
ChatBot Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versionsCVE-2026-57362 CVE 7.1 Research disclosed nvd.nist.gov
Other Prior to 0.19.1, fast-mcp-telegram validates HTTP Bearer tokens by joining the raw token string into a…CVE-2026-52830 CVE 9.4 Fixed nvd.nist.gov
Microsoft365 Copilot Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to…CVE-2026-41106 CVE 9.3 Research disclosed nvd.nist.gov
OpenAIOpenAI Chatbot for WordPress Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper <= 1.1.4 versionsCVE-2025-69134 CVE 7.5 Research disclosed nvd.nist.gov
Anyscaleray Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and…CVE-2026-57516 CVE 8.8 Fixed github.com
Gradio Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacksCVE-2026-49119 CVE 7.5 Fixed github.com
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a…CVE-2026-24266 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper…CVE-2026-24264 CVE 7.5 Research disclosed nvd.nist.gov
WPBot The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to…CVE-2026-13731 CVE 7.2 Research disclosed nvd.nist.gov
GitHubEnterprise Server A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an…CVE-2026-9132 CVE 6.5 Fixed nvd.nist.gov
Langflow Langflow: Code Injection Vulnerability in Code Validation EndpointCVE-2026-7873 CVE 9.9 Fixed github.com
Presenton Presenton before 0.8.8-beta bundles an MCP server that, on server/Docker deployments configured with session…CVE-2026-58446 CVE 6.5 Fixed nvd.nist.gov
Vibe-Trading Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote…CVE-2026-58169 CVE 7.5 Fixed nvd.nist.gov
Langflow IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF)CVE-2026-10564 CVE 8.2 Research disclosed nvd.nist.gov
AnthropicClaude Code From 2.1.38 until 2.1.163, Claude Code's worktree handling allowed creation of worktrees named ".git" and…CVE-2026-55607 CVE 8.8 Fixed nvd.nist.gov
AnthropicClaude Code From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a hardcoded, predictable path…CVE-2026-46406 CVE 6.1 Fixed nvd.nist.gov
DevolutionsPowerShell Universal Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal…CVE-2026-13437 CVE 6.5 Research disclosed nvd.nist.gov
Other GitHub MCP Server is GitHub's official MCP ServerCVE-2026-48529 CVE 6.0 Fixed nvd.nist.gov
MattermostMattermost Server Mattermost versions 10.11.x <= 10.11.18, 11.6.x <= 11.6.3, 11.5.x <= 11.5.6 fail to validate attachment URLs…CVE-2026-4339 CVE 6.5 Research disclosed nvd.nist.gov
ToolJet Prior to 3.20.178-lts, any authenticated user with builder role (free tier) can overwrite a globally-shared…CVE-2026-55413 CVE 9.4 Fixed nvd.nist.gov
ToolJet Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source componentCVE-2026-55412 CVE 8.3 Fixed nvd.nist.gov
ToolJet Prior to 3.20.1780-lts, the authenticated endpoint POST /api/data-sources/decrypt returns the decrypted…CVE-2026-55411 CVE 6.8 Fixed nvd.nist.gov
LibreChat Prior to 0.8.5, LibreChat's MCP OAuth implementation does not validate that the resource parameter from OAuth…CVE-2026-54030 CVE 9.3 Fixed nvd.nist.gov
JenkinsMCP Server A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers…CVE-2026-57300 CVE 4.3 Research disclosed nvd.nist.gov
AnythingLLM From 1.11.1 until 1.14.1, userId/workspaceId scoping to the parsed-files read/delete paths was addedCVE-2026-55611 CVE 0.0 Fixed nvd.nist.gov
Twenty Prior to 2.9.0, Twenty was vulnerable to a cross-workspace insecure direct object reference (IDOR) in the AI…CVE-2026-55583 CVE 7.6 Fixed nvd.nist.gov
Warp From 0.2024.03.12.08.02.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contains an OS command injection…CVE-2026-54699 CVE 7.7 Fixed nvd.nist.gov
Warp From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepted certain state-mutating…CVE-2026-54686 CVE 4.3 Fixed nvd.nist.gov
AnythingLLM Prior to 1.13.0, on Windows, the document folder listing route can accept an encoded absolute Windows path…CVE-2026-48789 CVE 4.3 Fixed nvd.nist.gov
Warp From 0.2023.03.21.08.02.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue…CVE-2026-48732 CVE 8.8 Fixed nvd.nist.gov
Warp From 0.2024.02.20.08.01.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue…CVE-2026-48731 CVE 7.8 Fixed nvd.nist.gov
Warp From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp allows terminal output to request…CVE-2026-48725 CVE 8.1 Fixed nvd.nist.gov
Warp From 0.2025.10.08.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command execution…CVE-2026-48721 CVE 8.6 Fixed nvd.nist.gov
Warp From 0.2025.03.05.08.02.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepts non-inline `OSC 1337;File`…CVE-2026-48720 CVE 8.8 Fixed nvd.nist.gov
Warp From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in…CVE-2026-48719 CVE 8.0 Fixed nvd.nist.gov
Warp From 0.2023.10.24.08.03.stable_00 until 0.2026.05.06.15.42.stable_01, Warp may open executable local files…CVE-2026-48704 CVE 8.8 Fixed nvd.nist.gov
Warp From 0.2025.04.09.08.11.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command execution…CVE-2026-48703 CVE 7.8 Fixed nvd.nist.gov
Rtkairtk-rewrite @rtk-ai/rtk-rewrite transparently rewrites shell commands executed via OpenClaw's exec tool to their RTK…CVE-2026-55249 CVE 8.8 Fixed nvd.nist.gov
Other rtk filters and compresses command outputs before they reach your LLM contextCVE-2026-54555 CVE 7.8 Fixed nvd.nist.gov
AnthropicClaude Code From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the…CVE-2026-54316 CVE 9.1 Fixed nvd.nist.gov
KidocodeCrawl4AI Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to…CVE-2026-53755 CVE 7.5 Fixed nvd.nist.gov
KidocodeCrawl4AI Prior to 0.8.8, the Docker API server's SSRF protection (validate_webhook_url / validate_url_destination in…CVE-2026-53754 CVE 7.5 Fixed nvd.nist.gov
KidocodeCrawl4AI Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature uses an AST validator…CVE-2026-53753 CVE 10.0 Fixed nvd.nist.gov
Rtk Airtk rtk filters and compresses command outputs before they reach your LLM contextCVE-2026-45792 CVE 5.5 Fixed nvd.nist.gov
RedhatSatellite A flaw was found in the foreman-mcp-serverCVE-2026-12112 CVE 7.8 Research disclosed nvd.nist.gov
vLLM Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the…CVE-2026-54232 CVE 8.8 Fixed nvd.nist.gov
MicrosoftGitHub Copilot GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a…CVE-2025-66389 CVE 7.5 Research disclosed nvd.nist.gov
ApacheDoris MCP Server Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query pathCVE-2025-66336 CVE 8.1 Fixed nvd.nist.gov
LiteLLM BerriAI litellm: UI User Enumeration leads to System-Wide Information DisclosureCVE-2026-12799 CVE 4.3 Vendor confirmed github.com
LiteLLM BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec LoaderCVE-2026-12798 CVE 6.3 Vendor confirmed github.com
LiteLLM BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type…CVE-2026-12797 CVE 6.3 Vendor confirmed github.com
LiteLLM BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session TokensCVE-2026-12796 CVE 6.3 Vendor confirmed github.com
LiteLLM LiteLLM: SSO Debug Flow Has Improper AuthenticationCVE-2026-12795 CVE 7.3 Vendor confirmed github.com
LiteLLM A security vulnerability has been detected in BerriAI litellm up to 1.82.2CVE-2026-12774 CVE 6.3 Research disclosed nvd.nist.gov
LiteLLM LiteLLM: MCP Proxy Has Improper AuthenticationCVE-2026-12773 CVE 7.3 Fixed github.com
LiteLLM LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session ExpirationCVE-2026-12772 CVE 6.3 Vendor confirmed github.com
LiteLLM LiteLLM: M2M JWT Handler Has Improper AuthorizationCVE-2026-12771 CVE 5.0 Vendor confirmed github.com
LiteLLM LiteLLM: Admin Key Handler Has Improper AuthorizationCVE-2026-12770 CVE 5.4 Vendor confirmed github.com
Langflow Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploitCVE-2026-55447 CVE 9.6 Fixed github.com
Langflow Langflow: Unauthenticated DoS through multipart form boundary file uploadCVE-2026-55446 CVE 7.5 Fixed github.com
Langflow Langflow: Logout button does not clear sessionCVE-2026-55423 CVE 6.1 Fixed github.com
Langflow Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another…CVE-2026-55255 CVE 8.4 FixedExploited Exploited github.com
MicrosoftGithub Copilot Chat Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an…CVE-2026-50519 CVE 7.5 Research disclosed nvd.nist.gov
Microsoft365 Copilot Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an…CVE-2026-47645 CVE 8.8 Research disclosed nvd.nist.gov
Microsoft365 Copilot Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot…CVE-2026-42895 CVE 7.5 Research disclosed nvd.nist.gov
pgAdminpgAdmin 4 Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence database…CVE-2026-12045 CVE 8.8 Fixed nvd.nist.gov
PraisonAI PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules…CVE-2026-56075 CVE 8.8 Fixed nvd.nist.gov
Microsoft365 Copilot Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose…CVE-2026-54130 CVE 7.5 Research disclosed nvd.nist.gov
Other In versions 3.0.1 and below, mcp-pinot defaults to running an HTTP MCP server bound to 0.0.0.0:8080 with no…CVE-2026-49257 CVE 10.0 Fixed nvd.nist.gov
TypeBot In versions 3.16.1 and earlier, POST /api/blocks/file-input/v3/generate-upload-url is unauthenticated and…CVE-2026-48768 CVE 9.3 Fixed nvd.nist.gov
TypeBot In versions prior to 3.17.2, SSRF validation is implemented by resolving a hostname once and checking whether…CVE-2026-48764 CVE 8.2 Fixed nvd.nist.gov
EclipseTheia In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a…CVE-2026-46580 CVE 8.8 Fixed nvd.nist.gov
EclipseTheia In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as…CVE-2026-44688 CVE 8.8 Fixed nvd.nist.gov
EclipseTheia In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses…CVE-2026-22551 CVE 6.5 Fixed nvd.nist.gov
n8n n8n: Wrong OAuth Scope on Evaluation Test Runs EndpointsCVE-2026-56775 CVE 5.4 Fixed github.com
Langflow Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leakCVE-2026-55450 CVE 9.3 Fixed github.com
vLLM vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic routerCVE-2026-54236 CVE 5.3 Fixed github.com
vLLM vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernelsCVE-2026-54235 CVE 6.5 Fixed github.com
vLLM vLLM: OOM Denial of Service via Audio Decompression BombCVE-2026-54233 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Any authenticated user can read other users' private notes via Socket.IOCVE-2026-54022 CVE 5.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path…CVE-2026-54021 CVE 6.3 Fixed github.com
Open WebUIopen-webui Open WebUI: RAG ACL Bypass in Milvus Multitenancy ModeCVE-2026-54019 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP RedirectsCVE-2026-54018 CVE 7.7 Fixed github.com
Open WebUIopen-webui Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversalCVE-2026-54017 CVE 7.7 Fixed github.com
Open WebUIopen-webui Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File EnumerationCVE-2026-54016 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI Prompt history IDOR: unbound history_id allows cross-prompt read and deletionCVE-2026-54015 CVE 6.4 Fixed github.com
Open WebUIopen-webui Open WebUI: Sibling-Prefix Path Traversal via /cache/{path}CVE-2026-54014 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Stored XSS to Account Takeover via Model Profile ImagesCVE-2026-54013 CVE 7.6 Fixed github.com
Open WebUIopen-webui Open WebUI: Forged model meta.knowledge allows cross-user file read and deletionCVE-2026-54012 CVE 7.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Stored XSS in Mermaid Markdown PreviewCVE-2026-54011 CVE 8.7 Fixed github.com
Open WebUIopen-webui Open WebUI: Forged chat-file link allows cross-user file read and deletionCVE-2026-54010 CVE 8.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Cross-user file disclosure via /api/chat/completions image_url fieldCVE-2026-54009 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)CVE-2026-54008 CVE 8.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Cross-origin postMessage confirmation bypass via action:submitCVE-2026-54007 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI IDOR: Calendar event re-parenting allows writing events into another user's calendarCVE-2026-54006 CVE 4.3 Fixed github.com
vLLM vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant servingCVE-2026-53923 CVE 7.5 Fixed github.com
Windows-MCP In versions prior to 0.7.5, certain HTTP modes exposed the MCP control plane without authentication while…CVE-2026-48989 CVE 8.9 Fixed nvd.nist.gov
Network-AI In versions 5.7.1 and earlier, the MCP SSE server allows unauthenticated cross-origin MCP tool invocation due…CVE-2026-48814 CVE 9.1 Fixed nvd.nist.gov
Backpropagate In versions 1.1.0 and 1.1.1, the optional Reflex web UI exposes a training control plane without…CVE-2026-48797 CVE 9.3 Fixed nvd.nist.gov
LangChainlanggraph LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and…CVE-2026-48776 CVE 9.1 Fixed osv.dev
TypeBot Versions 3.15.2 and below have an Insecure Direct Object Reference vulnerability through cross-workspace…CVE-2026-48759 CVE 7.1 Fixed nvd.nist.gov
SplunkAI Toolkit In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power"…CVE-2026-20265 CVE 4.3 Research disclosed nvd.nist.gov
vLLM vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and…CVE-2026-12491 CVE 4.8 Fixed github.com
WPBot Pro Wordpress Chatbot Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot <= 13.6.5 versionsCVE-2025-60223 CVE 7.7 Research disclosed nvd.nist.gov
QuantumCloud Conversational Forms for ChatBot Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud…CVE-2024-32729 CVE 7.5 Research disclosed nvd.nist.gov
n8n n8n: Public API Execution Retry Authorization BypassCVE-2026-56778 CVE 6.4 Fixed github.com
n8n n8n: Python Code Node AST Validator BypassCVE-2026-56777 CVE 5.0 Fixed github.com
n8n n8n: Wrong OAuth Scope On Evaluations Test Run Creation EndpointCVE-2026-56776 CVE 7.4 Fixed github.com
LangChain LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loadersCVE-2026-55443 CVE 5.5 Fixed github.com
n8n n8n: Denial of Service via ZIP decompression in webhook workflowCVE-2026-54314 CVE 5.9 Fixed github.com
n8n n8n: NoSQL Injection in MongoDB Node Find And Replace OperationCVE-2026-54313 CVE 7.7 Fixed github.com
n8n n8n: Microsoft SQL Node Prototype PollutionCVE-2026-54312 CVE 8.5 Fixed github.com
n8n n8n: Merge Node SQL Mode Prototype PollutionCVE-2026-54311 CVE 6.3 Fixed github.com
n8n n8n: SQL Injection in Postgres v1/TimesclaeDB NodesCVE-2026-54310 CVE 9.9 Fixed github.com
n8n n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control SessionsCVE-2026-54309 CVE 10.0 Fixed github.com
n8n n8n: Missing Token Validation on Microsoft Agent 365 Trigger and Stripe NodesCVE-2026-54308 CVE 7.2 Fixed github.com
n8n n8n: Credential Exfiltration via Permission BypassCVE-2026-54307 CVE 9.6 Fixed github.com
n8n n8n: Prototype Pollution enables confused-deputy execution via public webhooksCVE-2026-54306 CVE 5.4 Fixed github.com
n8n n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE EndpointsCVE-2026-54305 CVE 9.9 Fixed github.com
n8n n8n: SecurityScorecard Node Leaks API Token to User-Controlled HostCVE-2026-54304 CVE 7.7 Fixed github.com
n8n n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification EndpointsCVE-2026-54303 CVE 7.6 Fixed github.com
n8n n8n: Stored XSS in Chat Trigger NodeCVE-2026-54302 CVE 7.6 Fixed github.com
n8n n8n: Same-Origin XSS in Respond to Webhook NodeCVE-2026-54301 CVE 7.6 Fixed github.com
OpenClaw OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers…CVE-2026-53840 CVE 7.1 Fixed nvd.nist.gov
LiteLLM LiteLLM: Authentication Bypass via Host Header InjectionCVE-2026-49468 CVE 9.8 Fixed github.com
n8n n8n: Git Node Clone and Push Operations Bypass File SandboxCVE-2026-49465 CVE 7.7 Fixed github.com
n8n n8n: Python sandbox escapeCVE-2026-49444 CVE 8.5 Fixed github.com
vLLM vLLM: OpenAI auth bypassCVE-2026-48746 CVE 9.1 Fixed github.com
Langflow Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file readCVE-2026-48520 CVE 6.1 Fixed github.com
Langflow Langflow: Unauthenticated RCE in Shareable PlaygroundsCVE-2026-48519 CVE 9.6 Fixed github.com
Langflow Langflow: Path Traversal in Knowledge Bases API via Creation EndpointCVE-2026-42867 CVE 6.5 Fixed github.com
vLLM vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code…CVE-2026-41523 CVE 7.5 Fixed github.com
Langflow Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 EndpointsCVE-2026-33760 CVE 8.8 Fixed github.com
Chatway Live Chat Subscriber Sensitive Data Exposure in Chatway Live Chat &#8211; AI Chatbot, Customer Support, FAQ &amp…CVE-2026-49082 CVE 7.4 Research disclosed nvd.nist.gov
ChatBot Subscriber Broken Access Control in ChatBot <= 7.9.7 versionsCVE-2026-40788 CVE 7.1 Research disclosed nvd.nist.gov
Other The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all…CVE-2026-11624 CVE 9.4 Fixed nvd.nist.gov
Other AgenticMail gives AI agents real email addresses and phone numbersCVE-2026-50287 CVE 8.7 Fixed nvd.nist.gov
Chromachromadb ChromaDB has a code injection vulnerabilityCVE-2026-45833 CVE Critical Vendor confirmed github.com
Chromachromadb ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission…CVE-2026-45831 CVE 8.8 Vendor confirmed github.com
Chromachromadb ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's…CVE-2026-45830 CVE 8.8 Vendor confirmed github.com
vLLM vLLM is vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count…CVE-2026-5497 CVE 7.5 Fixed github.com
Other Prior to version 3.7.0, the kubectl_generic tool in mcp-server-kubernetes passes user-supplied flags directly…CVE-2026-47250 CVE 6.1 Fixed nvd.nist.gov
Other Prior to version 3.6.0, mcp-server-kubernetes exposes three environment variables (ALLOW_ONLY_READONLY_TOOLS…CVE-2026-46519 CVE 8.8 Fixed nvd.nist.gov
vLLM vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processorsCVE-2026-47155 CVE 6.5 Fixed github.com
LMDeploy In versions 0.12.3 and prior, hardcoded "trust_remote_code=True" enables HF supply-chain RCE without user…CVE-2026-46517 CVE 7.8 Research disclosed nvd.nist.gov
LMDeploy In versions 0.12.3 and prior, LMDeploy is vulnerable to arbitrary code execution through hardcoded…CVE-2026-46432 CVE 7.8 Research disclosed nvd.nist.gov
Mem0 Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the…CVE-2026-49948 CVE 8.1 Fixed nvd.nist.gov
MicrosoftVisual Studio Code Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual…CVE-2026-45482 CVE 8.4 Research disclosed nvd.nist.gov
MicrosoftCopilot Chat Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot…CVE-2026-47644 CVE 7.5 Research disclosed nvd.nist.gov
MicrosoftCopilot Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot…CVE-2026-45497 CVE 8.8 Research disclosed nvd.nist.gov
MicrosoftCopilot Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an…CVE-2026-42824 CVE 7.5 Research disclosed nvd.nist.gov
MLflow MLflow: Deterministic sampling in dataset digest enables predictable collisionsCVE-2026-10803 CVE 3.6 Fixed github.com
Gradio Gradio: Audio cache key ignores metadata when saving numpy audio outputsCVE-2026-10783 CVE 2.5 Fixed github.com
Hugging Facetransformers huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading…CVE-2026-5241 CVE 9.6 Fixed github.com
MLflow MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltrationCVE-2026-4035 CVE 9.1 Fixed github.com
LibreChat In versions up to and including 0.8.3, users with only `VIEW` access to an MCP server can retrieve the…CVE-2026-44653 CVE 6.5 Research disclosed nvd.nist.gov
GitlawbOpenClaude Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashTool input…CVE-2026-42074 CVE 9.8 Fixed nvd.nist.gov
LibreChat In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves ${VAR}…CVE-2026-32625 CVE 9.6 Fixed nvd.nist.gov
MLflow MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitionsCVE-2026-3198 CVE 6.5 Fixed github.com
Langroid Prior to version 0.63.0, SQLChatAgent executes SQL produced by an LLM, which is influenceable by prompt…CVE-2026-25879 CVE 9.8 Fixed nvd.nist.gov
SillyTavern Prior to 1.18.0, SillyTavern exposes /api/search/searxng, which accepts attacker-controlled baseUrl and uses…CVE-2026-46372 CVE 8.5 Fixed nvd.nist.gov
n8n-MCP Prior to 2.51.2, when ENABLE_MULTI_TENANT=true, the HTTP transport documents that the target n8n instance is…CVE-2026-45707 CVE 8.1 Fixed nvd.nist.gov
Springaicommunitymcp-security Prior to 0.1.9, the mcp-security framework fails to implement the mandatory SSRF mitigations outlined in the…CVE-2026-45609 CVE 6.5 Fixed nvd.nist.gov
n8n-MCP Prior to 2.51.3, the workflow telemetry sanitizer could retain partial fragments of URL-shaped node…CVE-2026-45582 CVE 6.5 Fixed nvd.nist.gov
Roslyn CodeLens MCP Server From 0.0.9 to 1.17.0, the get_diagnostics MCP tool loads and executes all DiagnosticAnalyzer assemblies…CVE-2026-45555 CVE 7.8 Fixed nvd.nist.gov
InfiniFlowragflow In 0.24.0 and earlier, a Jinja2 template injection in the prompt generator (rag/prompts/generator.py) allows…CVE-2026-45312 CVE 9.9 Research disclosed nvd.nist.gov
SillyTavern Prior to 1.18.0, corsProxyMiddleware forwards req.params.url directly into fetch(url, ...)CVE-2026-44652 CVE 6.9 Fixed nvd.nist.gov
SillyTavern Prior to 1.18.0, when fetch(url) throws, the code sends: res.status(500).send('Error occurred while trying to…CVE-2026-44651 CVE 6.9 Fixed nvd.nist.gov
SillyTavern Prior to 1.18.0, POST /api/extensions/delete endpoint accepts extensionName: "." which bypasses…CVE-2026-44650 CVE 9.1 Fixed nvd.nist.gov
SillyTavern Prior to 1.18.0, SillyTavern accepts Remote-User (Authelia) and X-Authentik-Username (Authentik) HTTP headers…CVE-2026-44649 CVE 9.8 Fixed nvd.nist.gov
SillyTavern Prior to 1.18.0, SillyTavern relies on cookie-session for authentication, storing all session data (user…CVE-2026-44648 CVE 7.5 Fixed nvd.nist.gov
FastGPT Prior to 4.15.0-beta1, the JavaScript sandbox worker at projects/code-sandbox/src/pool/worker.ts:356 blocks…CVE-2026-44287 CVE 6.3 Fixed nvd.nist.gov
FastGPT Prior to 4.15.0-beta1, a Server-Side Request Forgery (SSRF) vulnerability allows an authenticated attacker to…CVE-2026-44285 CVE 7.7 Fixed nvd.nist.gov
Agno agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows…CVE-2026-10105 CVE 8.3 Research disclosed nvd.nist.gov
Mintplex LabsAnythingLLM Prior to 1.13.0, the filesystem-search-files agent skill passes its LLM-controlled pattern parameter to…CVE-2026-48116 CVE 8.8 Fixed nvd.nist.gov
Mintplex LabsAnythingLLM Prior to 1.13.0, an approved mobile device token created in single-user mode can survive single-user ->…CVE-2026-47713 CVE 4.3 Fixed nvd.nist.gov
Mintplex LabsAnythingLLM Prior to 1.13.0, the AnythingLLM agent filesystem copy tool validates only the top-level source and…CVE-2026-45403 CVE 2.5 Fixed nvd.nist.gov
Gradio Gradio contains a cookie injection vulnerabilityCVE-2026-48545 CVE 6.8 Fixed github.com
LinuxLinux kernel In the Linux kernel, the following vulnerability has been resolved: ext4: fix dirtyclusters double decrement…CVE-2026-45920 CVE 7.8 Research disclosed nvd.nist.gov
vLLM vllm has Improper Resource Shutdown or ReleaseCVE-2026-9540 CVE 5.3 Vendor confirmed github.com
GitLabGitLab MCP Server GitLab MCP Server lets an AI agent talk directly to GitLabCVE-2026-44895 CVE 9.2 Fixed nvd.nist.gov
Lumiverse Prior to 0.9.7, the MCP server creation endpoint validates the command field against an allowlist of binary…CVE-2026-44450 CVE 9.9 Fixed nvd.nist.gov
Other Banks generates meaningful LLM prompts using a template language that makes senseCVE-2026-44209 CVE 7.5 Fixed nvd.nist.gov
VmwareSpring AI Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve…CVE-2026-41863 CVE 6.5 Fixed nvd.nist.gov
MLflow MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabledCVE-2026-2651 CVE 9.0 Fixed github.com
Hugging Facetransformers HuggingFace transformers vulnerable to remote code executionCVE-2026-4372 CVE 7.8 Fixed github.com
Microsoft365 Copilot Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an…CVE-2026-42827 CVE 7.5 Research disclosed nvd.nist.gov
Microsoft365 Copilot Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot…CVE-2026-41090 CVE 9.3 Research disclosed nvd.nist.gov
TypeBot Versions 3.15.2 and prior contain a critical stored XSS vulnerability in the app.typebot.io profile picture…CVE-2026-39970 CVE 8.5 Fixed nvd.nist.gov
TypeBot In versions 3.16.0 and prior, the WhatsApp Cloud API webhook endpoint (POST /v1/workspaces…CVE-2026-39969 CVE 6.5 Fixed nvd.nist.gov
TypeBot In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 ("Credential Theft via Client-Side Script…CVE-2026-39968 CVE 7.1 Research disclosed nvd.nist.gov
TypeBot In versions 3.15.2 and prior, the bot engine's the findResult query does not filter results by typebotId…CVE-2026-39967 CVE 3.1 Fixed nvd.nist.gov
TypeBot In versions 3.15.2, the getLinkedTypebots API endpoint returns full bot definitions to any authenticated user…CVE-2026-39966 CVE 6.5 Fixed nvd.nist.gov
TypeBot Versions 3.15.2 and prior contain an SSRF via Open Redirect Bypass as the HTTP Request block and Code block…CVE-2026-39965 CVE 7.7 Fixed nvd.nist.gov
TypeBot In versions prior to 3.16.0, the Typebot viewer (packages/embeds/js) renders anchor tags from rich text…CVE-2026-39964 CVE 5.4 Fixed nvd.nist.gov
TypeBot In versions prior to 3.16.0, SSRF protection for Webhook / HTTP Request blocks validates only the URL string…CVE-2026-34207 CVE 7.6 Fixed nvd.nist.gov
TypeBot In versions 3.15.2 and prior, the preview chat endpoint (POST /api/v1/typebots/{typebotId}/preview/startChat)…CVE-2026-33712 CVE 10.0 Fixed nvd.nist.gov
TypeBot In versions 3.15.2 and prior, the RatingButton component in the embed package renders the user-controlled…CVE-2026-28445 CVE 8.7 Fixed nvd.nist.gov
TypeBot In versions 3.15.2 and prior, the getResultLogs API endpoint authorizes the caller against the provided…CVE-2026-28444 CVE 6.5 Fixed nvd.nist.gov
LiteLLM LiteLLM allows a user to modify their own user_role via the /user/update endpointCVE-2026-47102 CVE 8.8 Fixed github.com
LiteLLM LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does…CVE-2026-47101 CVE 8.8 Fixed github.com
MLflow MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions…CVE-2026-2734 CVE 6.5 Fixed github.com
FlowiseAIflowise Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpageCVE-2026-56277 CVE Medium Fixed github.com
FlowiseAIflowise Flowise: Mass Assignment in PUT /api/v1/user Allows Authenticated Users to Override Password Hash and Bypass…CVE-2026-56276 CVE Medium Fixed github.com
FlowiseAIflowise Flowise: Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint Returns All Unprotected ChatflowsCVE-2026-56268 CVE 7.7 Fixed github.com
AI Chatbot & Workflow Automation by AIWU The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Stored Cross-Site…CVE-2026-2955 CVE 6.4 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause…CVE-2026-24215 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an…CVE-2026-24214 CVE 9.8 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an…CVE-2026-24213 CVE 9.8 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflowCVE-2026-24210 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issueCVE-2026-24209 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issueCVE-2026-24208 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypassCVE-2026-24207 CVE 9.8 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypassCVE-2026-24206 CVE 9.8 Research disclosed nvd.nist.gov
n8n n8n: Legacy ExecuteWorkflow Node Bypassed File Path RestrictionsCVE-2026-56352 CVE 6.4 Fixed github.com
n8n n8n: Credential exfiltration via Allowed HTTP Request Domains BypassCVE-2026-56348 CVE 9.1 Fixed github.com
MLflow MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local…CVE-2026-2611 CVE 9.6 Fixed github.com
Chromachromadb ChromaDB Python project has a pre-authentication code injection vulnerabilityCVE-2026-45829 CVE 10.0 Vendor confirmed github.com
Dify Dify before version 1.14.2 contains an authorization bypass vulnerability that allows authenticated editor…CVE-2026-41947 CVE 9.1 Fixed nvd.nist.gov
MLflow MLFlow Creates a Temporary File With Insecure PermissionsCVE-2026-4137 CVE 7.0 Fixed github.com
AI Engine The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Privilege…CVE-2026-8719 CVE 8.8 Research disclosed nvd.nist.gov
MicrosoftMicrosoft APM Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the…CVE-2026-46383 CVE 5.5 Fixed nvd.nist.gov
MicrosoftMicrosoft APM From 0.5.4 to 0.12.4, two primitive integrators in apm-cli enumerate package files with bare Path.glob() /…CVE-2026-45539 CVE 7.4 Fixed nvd.nist.gov
MicrosoftMicrosoft APM Prior to 0.8.12, Microsoft APM normalizes marketplace plugins by copying plugin components referenced in…CVE-2026-44641 CVE 7.1 Fixed nvd.nist.gov
MLflow MLflow: unauthenticated access to certain FastAPI routesCVE-2026-2652 CVE 8.6 Fixed github.com
Open WebUIopen-webui Open WebUI vulnerable to stored XSS via OAuth picture claim stored as SVG data URI in profile_image_urlCVE-2026-56398 CVE 7.3 Fixed github.com
FlowiseAIflowise Flowise has an MCP Security Bypass that Enables RCECVE-2026-56274 CVE 9.9 Fixed github.com
FlowiseAIflowise FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeoverCVE-2026-46480 CVE 8.8 Fixed github.com
FlowiseAIflowise FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeoverCVE-2026-46479 CVE 8.8 Fixed github.com
FlowiseAIflowise FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeoverCVE-2026-46478 CVE 8.8 Fixed github.com
FlowiseAIflowise FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeoverCVE-2026-46477 CVE 8.8 Fixed github.com
FlowiseAIflowise FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeoverCVE-2026-46476 CVE 8.8 Fixed github.com
FlowiseAIflowise FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeoverCVE-2026-46475 CVE 8.8 Fixed github.com
FlowiseAIflowise FlowiseAI: Vector Store No Permission ChecksCVE-2026-46444 CVE 8.8 Fixed github.com
FlowiseAIflowise FlowiseAI Vulnerable to Credential Data LeakCVE-2026-46443 CVE 6.5 Fixed github.com
FlowiseAIflowise FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox EscapeCVE-2026-46442 CVE 9.9 Fixed github.com
FlowiseAIflowise FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource ReassignmentCVE-2026-46441 CVE 9.6 Fixed github.com
FlowiseAIflowise FlowiseAI Exposes Basic Auth Credentials via APICVE-2026-46440 CVE 9.1 Fixed github.com
Other Prior to 1.7.9, OCI ownership validation skips label-match check when upstream OCI registry returns HTTP 429…CVE-2026-45781 CVE 3.5 Fixed nvd.nist.gov
n8n n8n Has a Cross-user Authorization Bypass in Dynamic Credential OAuth EndpointsCVE-2026-45732 CVE 8.1 Fixed github.com
Open WebUIopen-webui Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin AccountsCVE-2026-45675 CVE 8.1 Fixed github.com
Open WebUIopen-webui Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassedCVE-2026-45672 CVE 8.8 Fixed github.com
Open WebUIopen-webui Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletionCVE-2026-45671 CVE 8.0 Fixed github.com
Open WebUIopen-webui Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)CVE-2026-45667 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI has an Indirect Object Reference (IDOR) in user notesCVE-2026-45666 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach…CVE-2026-45402 CVE 8.1 Fixed github.com
Open WebUIopen-webui Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed…CVE-2026-45401 CVE 8.5 Fixed github.com
Open WebUIopen-webui Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url`CVE-2026-45400 CVE 8.5 Fixed github.com
Open WebUIopen-webui Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing…CVE-2026-45399 CVE 7.1 Fixed github.com
Open WebUIopen-webui Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access ControlsCVE-2026-45398 CVE 7.5 Fixed github.com
Open WebUIopen-webui Open WebUI Vulnerable to Unauthenticated RAG Configuration DisclosureCVE-2026-45397 CVE 5.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data…CVE-2026-45396 CVE 5.4 Fixed github.com
Open WebUIopen-webui Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt…CVE-2026-45387 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI has an IDOR vulnerability in the pin_channel_message API endpointCVE-2026-45386 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI has an IDOR vulnerability in the update_message_by_id API endpointCVE-2026-45385 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]CVE-2026-45365 CVE 5.4 Fixed github.com
Open WebUIopen-webui Open WebUI Exposes System Prompt to Regular User [Non-Admin]CVE-2026-45351 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI's chat completion API allows tool restrictions to be bypassedCVE-2026-45350 CVE 7.1 Fixed github.com
Open WebUIopen-webui Open WebUI has Broken Access Control for Completions APICVE-2026-45349 CVE 7.1 Fixed github.com
Open WebUIopen-webui Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate functionCVE-2026-45347 CVE 4.3 Fixed github.com
Open WebUIopen-webui Open WebUI missing authorization check at the model update function - models from other users can be updatedCVE-2026-45345 CVE 6.5 Fixed github.com
Open WebUIopen-webui Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)CVE-2026-45338 CVE 7.7 Fixed github.com
Open WebUIopen-webui Open WebUI has a full SSRF Vulnerability in the RAG Web Search FeatureCVE-2026-45331 CVE 8.5 Fixed github.com
Open WebUIopen-webui Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)CVE-2026-45318 CVE 5.4 Fixed github.com
Open WebUIopen-webui Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL ManipulationCVE-2026-45317 CVE 4.6 Fixed github.com
Open WebUIopen-webui Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only…CVE-2026-45316 CVE 3.5 Fixed osv.dev
Open WebUIopen-webui Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptionsCVE-2026-45315 CVE 8.7 Fixed osv.dev
Open WebUIopen-webui Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/imageCVE-2026-45314 CVE 6.1 Fixed osv.dev
Open WebUIopen-webui Open WebUI has stored XSS via the HTML renedering viewCVE-2026-45303 CVE 7.7 Fixed osv.dev
Open WebUIopen-webui Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every…CVE-2026-45301 CVE 8.1 Fixed osv.dev
Open WebUIopen-webui Open WebUI has Stored Cross-Site Scripting In Profile PictureCVE-2026-45299 CVE 5.4 Fixed osv.dev
n8n n8n Has a Source Control Pull SQL InjectionCVE-2026-44792 CVE 9.0 Fixed github.com
n8n n8n Has an XML Node Prototype Pollution Patch BypassCVE-2026-44791 CVE 9.9 Fixed github.com
n8n n8n Has an Arbitrary File Read via Git NodeCVE-2026-44790 CVE 8.8 Fixed github.com
n8n n8n: HTTP Request Node Pagination Prototype Pollution to RCECVE-2026-44789 CVE 9.9 Fixed osv.dev
MLflowMCP Registry Prior to 1.7.7, the Registry's HTTP-based namespace verification (POST /v0/auth/http, POST /v0.1/auth/http)…CVE-2026-44430 CVE 4.0 Fixed nvd.nist.gov
MLflowMCP Registry Prior to 1.7.7, the public catalogue UI served at GET / (file internal/api/handlers/v0/ui_index.html) is…CVE-2026-44429 CVE 5.4 Fixed nvd.nist.gov
MLflowMCP Registry Prior to 1.7.6, the client-side and server-side GitHub OIDC flow is bound only to a global audience string…CVE-2026-44428 CVE 4.7 Fixed nvd.nist.gov
Other From 1.1.0 to 1.7.4, the TrailingSlashMiddleware in internal/api/server.go is vulnerable to an open redirect…CVE-2026-44427 CVE 0.0 Fixed nvd.nist.gov
FlowiseAIflowise FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow ReassignmentCVE-2026-42863 CVE 8.1 Fixed github.com
FlowiseAIflowise FlowiseAI has Mass Assignment in Tool Update Endpoint that Allows Cross-Workspace Resource ReassignmentCVE-2026-42862 CVE 5.0 Fixed github.com
FlowiseAIflowise FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource ReassignmentCVE-2026-42861 CVE 9.6 Fixed github.com
Hatchet Prior to 0.83.39, a missing authorization directive on the GET /api/v1/stable/dags/tasks endpoint caused…CVE-2026-42572 CVE 6.5 Fixed nvd.nist.gov
RMCP Prior to version 1.4.0, the rmcp crate's Streamable HTTP server transport (crates/rmcp/src…CVE-2026-42559 CVE 8.8 Fixed nvd.nist.gov
LangChain LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warningCVE-2026-45134 CVE 7.1 Fixed github.com
GitHubCopilot CLI GitHub Copilot CLI brings AI-powered coding assistance directly to your command lineCVE-2026-45033 CVE 7.8 Fixed nvd.nist.gov
Vercel From 50.16.0 to 52.0.0, hen the Vercel CLI runs in non-interactive mode (--non-interactive or auto-detected…CVE-2026-44479 CVE 5.5 Fixed nvd.nist.gov
Fit2cloudSQLBot Prior to 1.8.0, SQLBot contains a Cross-Workspace IDOR (Insecure Direct Object Reference) and Authorization…CVE-2026-42463 CVE 8.1 Fixed nvd.nist.gov
Code Runner MCP Server A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http…CVE-2026-5029 CVE 8.7 Research disclosed nvd.nist.gov
DkfznnU-Net Prior to 2.4.1, the nnU-Net Issue Triage workflow in .github/workflows/issue-triage.yml is vulnerable to…CVE-2026-44246 CVE 7.2 Fixed nvd.nist.gov
Other From 0.8.0 to 0.8.1 , the discover_pipeline_files() function in src/ciguard/discovery.py walks a directory…CVE-2026-44220 CVE 3.2 Fixed nvd.nist.gov
JunoClaw Prior to 0.x.y-security-1, the WAVS bridge's computeDataVerify called fetch() on agent-supplied URLs without…CVE-2026-43993 CVE 8.2 Fixed nvd.nist.gov
JunoClaw Prior to 0.x.y-security-1, every MCP write tool (send_tokens, execute_contract, instantiate_contract…CVE-2026-43992 CVE 9.8 Fixed nvd.nist.gov
JunoClaw Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed…CVE-2026-43991 CVE 8.4 Fixed nvd.nist.gov
JunoClaw Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd…CVE-2026-43990 CVE 8.4 Fixed nvd.nist.gov
JunoClaw Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a filesystem path from the agent and uploaded…CVE-2026-43989 CVE 8.5 Fixed nvd.nist.gov
MicrosoftOutlook Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an…CVE-2026-42893 CVE 7.5 Research disclosed nvd.nist.gov
Open-WebSearch Prior to 2.1.7, isPublicHttpUrl / assertPublicHttpUrl in src/utils/urlSafety.ts do not recognize bracketed…CVE-2026-42260 CVE 8.2 Fixed nvd.nist.gov
LobeHub Prior to 2.1.48, when LobeChat processes custom tags in the Render process of src/features…CVE-2026-42045 CVE 6.2 Fixed nvd.nist.gov
Microsoft365 Copilot Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing…CVE-2026-41614 CVE 6.2 Research disclosed nvd.nist.gov
MicrosoftVisual Studio Code Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub…CVE-2026-41109 CVE 8.8 Research disclosed nvd.nist.gov
Microsoft365 Copilot Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locallyCVE-2026-41100 CVE 4.4 Research disclosed nvd.nist.gov
AI Chatbot & Workflow Automation by AIWU The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to SQL Injection in versions…CVE-2026-2993 CVE 7.5 Research disclosed nvd.nist.gov
Open Source Kubectl MCP Server An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim…CVE-2025-65719 CVE 9.8 Research disclosed nvd.nist.gov
pgAdminpgAdmin 4 Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API…CVE-2026-7817 CVE 6.5 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI has a CORS misconfiguration and session validation issueCVE-2026-56400 CVE 8.3 Fixed osv.dev
OpenClaw OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and…CVE-2026-45001 CVE 7.1 Fixed nvd.nist.gov
OpenClaw OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio…CVE-2026-44995 CVE 7.3 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read PermissionCVE-2026-44571 CVE 6.5 Fixed osv.dev
Open WebUIopen-webui Open WebUI has inconsistent authorization controls within memories APICVE-2026-44570 CVE 8.3 Fixed osv.dev
Open WebUIopen-webui Open WebUI's Insecure Message Access Breaks AuthorizationCVE-2026-44569 CVE 7.1 Fixed osv.dev
Open WebUIopen-webui Open WebUI Arbitrary File Write, Delete via Path TraversalCVE-2026-44565 CVE 8.1 Fixed osv.dev
Bx33661Wireshark MCP In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_export_objects MCP tool that accepts an…CVE-2026-43901 CVE 6.8 Research disclosed nvd.nist.gov
SOCFortress CoPilot Prior to 0.1.57, SOCFortress CoPilot ships a hardcoded JWT signing secret as a fallback value in…CVE-2026-42869 CVE 10.0 Fixed nvd.nist.gov
LiteLLM LiteLLM has a sandbox escape in custom-code guardrailCVE-2026-40217 CVE 8.8 Fixed github.com
Other CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure…CVE-2026-31252 CVE 5.7 Research disclosed nvd.nist.gov
Other Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary…CVE-2026-30635 CVE 8.1 Research disclosed nvd.nist.gov
MLflow MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystemCVE-2026-2614 CVE 7.5 Fixed github.com
MLflow MLflow Has a Server-Side Request Forgery (SSRF) VulnerabilityCVE-2026-2393 CVE 7.1 Fixed github.com
LangChainlangchain-core LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()`…CVE-2026-44843 CVE 8.2 Fixed github.com
Open WebUIopen-webui open-webui Vulnerable to Stored XSS via Model DescriptionCVE-2026-44721 CVE 7.3 Fixed osv.dev
n8n-MCP From version 2.18.7 to before version 2.50.2, there is an authenticated server-side request forgery…CVE-2026-44694 CVE 9.1 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application OrderCVE-2026-44568 CVE 4.8 Fixed osv.dev
Open WebUIopen-webui Open WebUI has Improper Authorization ControlCVE-2026-44567 CVE 7.3 Fixed osv.dev
Open WebUIopen-webui Open WebUI Vulnerable to Arbitrary File Upload and Path TraversalCVE-2026-44566 CVE 7.3 Fixed osv.dev
Open WebUIopen-webui Read-Only Open WebUI Users Can Modify Collaborative Documents via Socket.IOCVE-2026-44564 CVE 5.4 Fixed osv.dev
Open WebUIopen-webui Open WebUI's Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/showCVE-2026-44563 CVE 5.4 Fixed osv.dev
Open WebUIopen-webui Open WebUI's Model Import Overwrites Any Model Without Ownership CheckCVE-2026-44562 CVE 6.5 Fixed osv.dev
Open WebUIopen-webui Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM ChannelsCVE-2026-44561 CVE 5.4 Fixed osv.dev
Open WebUIopen-webui Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector SearchCVE-2026-44560 CVE 6.5 Fixed osv.dev
Open WebUIopen-webui Open WebUI Missing Access Check on Channel Members Endpoint for Standard ChannelsCVE-2026-44559 CVE 4.3 Fixed osv.dev
Open WebUIopen-webui Open WebUI's Channel Access Grants Bypass filter_allowed_access_grantsCVE-2026-44558 CVE 5.4 Fixed osv.dev
Open WebUIopen-webui Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-CollectionCVE-2026-44557 CVE 4.3 Fixed osv.dev
Open WebUIopen-webui Open WebUI's responses passthrough endpoint lacks access control authorizationCVE-2026-44556 CVE 7.1 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI's Base Model Routing Bypasses Access Control via Model ChainingCVE-2026-44555 CVE 7.6 Fixed osv.dev
Open WebUIopen-webui Open WebUI has Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection OverwriteCVE-2026-44554 CVE 8.1 Fixed osv.dev
Open WebUIopen-webui Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note AccessCVE-2026-44553 CVE 8.1 Fixed osv.dev
Open WebUIopen-webui Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance…CVE-2026-44552 CVE 8.7 Fixed osv.dev
Open WebUIopen-webui Open WebUI has an LDAP Empty Password Authentication BypassCVE-2026-44551 CVE 9.1 Fixed osv.dev
Open WebUIopen-webui Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' AccountsCVE-2026-44550 CVE 5.0 Fixed osv.dev
Open WebUIopen-webui Open WebUI has stored XSS in Excel file previewCVE-2026-44549 CVE 7.3 Fixed osv.dev
FastGPT Prior to version 4.14.17, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows…CVE-2026-44286 CVE 2.3 Fixed nvd.nist.gov
FastGPT Prior to version 4.14.17, FastGPT had an inconsistent SSRF protection gap in MCP tool URL handlingCVE-2026-44284 CVE 6.3 Fixed nvd.nist.gov
Mintplex LabsAnythingLLM Prior to version 1.12.1, GET /api/workspace/:slug/tts/:chatId in AnythingLLM returns the text-to-speech audio…CVE-2026-42456 CVE 4.3 Fixed nvd.nist.gov
FastGPT In versions 4.14.11 and prior, FastGPT's isInternalAddress() function in packages/service/…CVE-2026-42345 CVE 7.7 Research disclosed nvd.nist.gov
FastGPT In versions 4.14.11 and prior, FastGPT's isInternalAddress() function in packages/service/…CVE-2026-42344 CVE 6.3 Research disclosed nvd.nist.gov
FastGPT In versions 4.14.13 and prior, the code-sandbox component suffers from insufficient resource isolation and…CVE-2026-42343 CVE 6.3 Research disclosed nvd.nist.gov
FastGPT From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to…CVE-2026-42302 CVE 9.8 Fixed nvd.nist.gov
n8n-MCP Prior to version 2.47.13, when n8n-mcp runs in HTTP transport mode, authenticated MCP tools/call requests had…CVE-2026-42282 CVE 4.3 Fixed nvd.nist.gov
Onyx Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint lets…CVE-2026-42276 CVE 4.3 Fixed nvd.nist.gov
n8n-MCP Prior to version 2.47.11, when n8n-mcp runs in HTTP transport mode, incoming requests to the POST /mcp…CVE-2026-41495 CVE 5.3 Fixed nvd.nist.gov
Langfuse From version 3.68.0 to before version 3.167.0, there is a role-based-access control flaw in the LLM…CVE-2026-41487 CVE 5.4 Fixed nvd.nist.gov
n8n-MCP In versions 2.47.4 through 2.47.13, the SDK embedder path (N8NDocumentationMCPServer constructor…CVE-2026-42449 CVE 8.5 Fixed nvd.nist.gov
i18nextI18next Http Backend Versions prior to 3.0.5 interpolate the lng and ns values directly into the configured loadPath / addPath URL…CVE-2026-41691 CVE 9.1 Fixed nvd.nist.gov
MicrosoftCopilot Chat Improper neutralization of special elements used in a command ('command injection') in Copilot Chat…CVE-2026-33111 CVE 7.5 Research disclosed nvd.nist.gov
Microsoft365 Copilot Chat Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an…CVE-2026-26164 CVE 7.5 Research disclosed nvd.nist.gov
Microsoft365 Copilot Chat Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an…CVE-2026-26129 CVE 7.5 Research disclosed nvd.nist.gov
FlowiseAIflowise Flowise: Bcrypt Password Hash ExposureCVE-2026-8026 CVE 3.7 Vendor confirmed github.com
vLLM vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parametersCVE-2026-44223 CVE 6.5 Fixed github.com
vLLM vLLM Vulnerable to Remote DoS via Special-Token PlaceholdersCVE-2026-44222 CVE 7.5 Fixed github.com
LinuxLinux kernel In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching…CVE-2026-43067 CVE 9.8 Research disclosed nvd.nist.gov
Langflow Langflow Knowledge Bases API is Vulnerable to Path TraversalCVE-2026-42048 CVE 9.6 Fixed github.com
OracleOracle MCP Server Helper Tool Vulnerability in the Oracle MCP Server Helper Tool product of Oracle Open Source Projects (component: helper…CVE-2026-35228 CVE 8.7 Research disclosed nvd.nist.gov
Other The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is…CVE-2026-3456 CVE 7.5 Research disclosed nvd.nist.gov
Fit2cloudSQLBot In versions 1.7.0 and earlier, the Text2SQL chat interface is vulnerable to prompt injectionCVE-2026-33324 CVE 8.8 Fixed nvd.nist.gov
Ollamagithub.com/ollama/ollama Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loaderCVE-2026-7482 CVE 9.1 Fixed github.com
Dify Prior to version 1.13.1, using the method POST /api/files/upload, any unauthenticated user can upload an SVG…CVE-2026-42138 CVE 6.1 Fixed nvd.nist.gov
PPTAgent Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`CVE-2026-42080 CVE 4.6 Fixed nvd.nist.gov
PPTAgent Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() of…CVE-2026-42079 CVE 8.6 Fixed nvd.nist.gov
PPTAgent Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via…CVE-2026-42078 CVE 4.6 Fixed nvd.nist.gov
Evolver Prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to…CVE-2026-42077 CVE 5.2 Fixed nvd.nist.gov
Evolver Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attackers to…CVE-2026-42076 CVE 9.8 Fixed nvd.nist.gov
Evolver Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows…CVE-2026-42075 CVE 8.1 Fixed nvd.nist.gov
n8n n8n has SQL Injection in Snowflake and MySQL NodesCVE-2026-42237 CVE 8.2 Fixed osv.dev
n8n n8n Vulnerable to Unauthenticated Denial of Service via MCP Client RegistrationCVE-2026-42236 CVE 7.5 Fixed osv.dev
n8n n8n Vulnerable to XSS via MCP OAuth clientCVE-2026-42235 CVE 8.2 Fixed osv.dev
n8n n8n has a Python Task Runner Sandbox Escape VulnerabilityCVE-2026-42234 CVE 7.5 Fixed osv.dev
n8n n8n has SQL Injection in Oracle Database Node via Limit FieldCVE-2026-42233 CVE 9.8 Fixed osv.dev
n8n n8n has XML Node Prototype Pollution that to RCECVE-2026-42232 CVE 9.9 Fixed osv.dev
n8n n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCECVE-2026-42231 CVE 10.0 Fixed osv.dev
n8n n8n has Open Redirect in MCP OAuth Consent FlowCVE-2026-42230 CVE 4.7 Fixed osv.dev
n8n n8n has SQL Injection in SeaTable NodeCVE-2026-42229 CVE 6.8 Fixed osv.dev
n8n n8n Vulnerable to Hijacking of Unauthenticated Chat ExecutionCVE-2026-42228 CVE 5.4 Fixed osv.dev
n8n n8n has Public API Variables IDOR that Allows Cross-Project Secret DisclosureCVE-2026-42227 CVE 7.7 Fixed osv.dev
n8n n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key ReplayCVE-2026-42226 CVE 8.5 Fixed osv.dev
JoeCastrom A vulnerability was detected in JoeCastrom mcp-chat-studio up to 1.5.0CVE-2026-7147 CVE 7.3 Research disclosed nvd.nist.gov
vLLM vLLM makes Use of Uninitialized ResourceCVE-2026-7141 CVE 5.6 Fixed github.com
Ollamagithub.com/ollama/ollama Ollama is Vulnerable to Path TraversalCVE-2026-7020 CVE 5.6 Vendor confirmed github.com
LiteLLM LiteLLM: Authenticated command execution via MCP stdio test endpointsCVE-2026-42271 CVE 8.8 FixedExploited Exploited github.com
LiteLLM LiteLLM has SQL Injection in Proxy API key verificationCVE-2026-42208 CVE 9.8 FixedExploited Exploited github.com
LiteLLM LiteLLM: Server-Side Template Injection in /prompts/test endpointCVE-2026-42203 CVE 8.8 Fixed github.com
LangChain Prior to 1.1.14, langchain-openai's _url_to_size() helper (used by get_num_tokens_from_messages for image…CVE-2026-41488 CVE 3.1 Fixed nvd.nist.gov
Anyscaleray Ray: Remote Code Execution via Parquet Arrow Extension Type DeserializationCVE-2026-41486 CVE 8.8 Fixed github.com
LangChain Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.split_text_from_url() validated the initial…CVE-2026-41481 CVE 6.5 Fixed nvd.nist.gov
Mintplex LabsAnythingLLM Prior to version 1.12.1, AnythingLLM's in-chat markdown renderer has an unsafe custom rule for images that…CVE-2026-41318 CVE 5.4 Fixed nvd.nist.gov
LinuxLinux kernel In the Linux kernel, the following vulnerability has been resolved: bnge: return after aux…CVE-2026-31621 CVE 5.5 Research disclosed nvd.nist.gov
Other A vulnerability was determined in ericc-ch copilot-api up to 0.7.0CVE-2026-6874 CVE 4.3 Research disclosed nvd.nist.gov
PaperclipPaperclipai Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any…CVE-2026-41679 CVE 10.0 Fixed nvd.nist.gov
OpenClaw OpenClaw before 2026.3.28 contains an agentic consent bypass vulnerability allowing LLM agents to silently…CVE-2026-41349 CVE 8.8 Fixed nvd.nist.gov
Paperclippaperclipai Versions of @paperclipai/server prior to 2026.416.0 contain a privilege escalation vulnerability that allows…CVE-2026-41208 CVE 8.8 Fixed nvd.nist.gov
JS LangSmith Client SDKs provide SDK's for interacting with the LangSmith platformCVE-2026-41182 CVE 5.3 Fixed nvd.nist.gov
Microsoft365 Copilot Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to…CVE-2026-33102 CVE 9.3 Research disclosed nvd.nist.gov
Website LLMs.txt The Website LLMs.txt plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in…CVE-2026-6712 CVE 4.4 Research disclosed nvd.nist.gov
Website LLMs.txt The Website LLMs.txt plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab'…CVE-2026-6711 CVE 6.1 Research disclosed nvd.nist.gov
FlowiseAIflowise Flowise: CSV Agent Prompt Injection Remote Code Execution VulnerabilityCVE-2026-41264 CVE 9.8 Fixed github.com
DayuanjiangNext AI Draw.io Prior to 0.4.15, the embedded HTTP sidecar contains three POST handlers (/api/state, /api/restore, and…CVE-2026-40608 CVE 5.5 Fixed nvd.nist.gov
SSE A path traversal vulnerability exists in excel-mcp-server versions up to and including 0.1.7CVE-2026-40576 CVE 9.4 Fixed nvd.nist.gov
AnthropicClaude Code Prior to version 2.1.64, Claude Code's sandbox did not prevent sandboxed processes from creating symlinks…CVE-2026-39861 CVE 10.0 Fixed nvd.nist.gov
Copilot Apicopilot-api A vulnerability was found in ericc-ch copilot-api up to 0.7.0CVE-2026-6662 CVE 7.3 Research disclosed nvd.nist.gov
Langflow Langflow vulnerable to injectionCVE-2026-6599 CVE 6.3 Vendor confirmed github.com
Langflow Langflow: Cleartext Storage of Authentication Settings in Project Creation EndpointCVE-2026-6598 CVE 4.3 Fixed github.com
Langflow Langflow has an Information Leak through Incomplete API Key RedactionCVE-2026-6597 CVE 2.7 Vendor confirmed github.com
Langflowlangflow-base Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload APICVE-2026-6596 CVE 7.3 Fixed github.com
Dify Prior to 1.13.1, the method `DELETE /console/api/installed-apps/<appId>/conversations/<conversationId>` has…CVE-2026-34082 CVE 4.3 Fixed nvd.nist.gov
InternlmLMDeploy Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's…CVE-2026-33626 CVE 7.5 Fixed nvd.nist.gov
ApacheDoris MCP Server Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query…CVE-2025-66335 CVE 5.3 Research disclosed nvd.nist.gov
SuperAGI A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14CVE-2026-6582 CVE 7.3 Research disclosed nvd.nist.gov
FlowiseAIflowise Flowise: Airtable_Agent Code Injection Remote Code Execution VulnerabilityCVE-2026-41265 CVE 9.8 Fixed github.com
AAPAAP MCP A flaw was found in the AAP MCP serverCVE-2026-6494 CVE 5.3 Fixed nvd.nist.gov
FlowiseAIflowise Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored…CVE-2026-41279 CVE 7.5 Fixed github.com
FlowiseAIflowise Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and…CVE-2026-41278 CVE 7.5 Fixed github.com
FlowiseAIflowise Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)CVE-2026-41277 CVE 8.8 Fixed github.com
FastGPT In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL injectionCVE-2026-40352 CVE 8.8 Fixed nvd.nist.gov
FastGPT In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript type assertion without…CVE-2026-40351 CVE 9.8 Fixed nvd.nist.gov
AnthropicClaude Code In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from…CVE-2026-35603 CVE 7.3 Fixed nvd.nist.gov
Other In versions prior to 0.6.0, the read_only mode enforcement can be bypassed using APOC CALL procedures…CVE-2026-35402 CVE 2.3 Fixed nvd.nist.gov
FlowiseAIflowise Flowise: Weak Default Express Session SecretCVE-2026-56278 CVE 5.6 Fixed github.com
FlowiseAIflowise Flowise Execute Flow function has an SSRF vulnerabilityCVE-2026-56275 CVE 7.1 Fixed github.com
FlowiseAIflowise Flowise: Path Traversal in Vector Store basePathCVE-2026-56273 CVE Medium Fixed github.com
FlowiseAIflowise Flowise: Weak Default JWT SecretsCVE-2026-56271 CVE 5.6 Fixed github.com
FlowiseAIflowise Flowise: Unauthenticated Information Disclosure of OAuth Secrets (Cleartext) via GET RequestCVE-2026-56270 CVE 5.3 Fixed github.com
FlowiseAIflowise Flowise: Weak Default Token Hash SecretCVE-2026-56269 CVE 5.6 Fixed github.com
FlowiseAIflowise Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)CVE-2026-43995 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise: resetPassword Authentication Bypass VulnerabilityCVE-2026-41276 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise: Password Reset Link Sent Over Unsecured HTTPCVE-2026-41275 CVE 7.5 Fixed github.com
FlowiseAIflowise Flowise: Cypher Injection in GraphCypherQAChainCVE-2026-41274 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in FlowiseCVE-2026-41273 CVE 8.2 Fixed github.com
FlowiseAIflowise Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)CVE-2026-41272 CVE 7.1 Fixed github.com
FlowiseAIflowise Flowise: APIChain Prompt Injection SSRF in GET/POST API ChainsCVE-2026-41271 CVE 8.3 Fixed github.com
FlowiseAIflowise Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function SandboxCVE-2026-41270 CVE 8.3 Fixed github.com
FlowiseAIflowise Flowise: File Upload Validation Bypass in createAttachmentCVE-2026-41269 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise: Parameter Override Bypass Remote Command ExecutionCVE-2026-41268 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization AssociationCVE-2026-41267 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise: Sensitive Data Leak in public-chatbotConfigCVE-2026-41266 CVE 7.5 Fixed github.com
FlowiseAIflowise Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when…CVE-2026-41138 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise: Code Injection in CSVAgent leads to Authenticated RCECVE-2026-41137 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise: Authenticated RCE Via MCP AdaptersCVE-2026-40933 CVE 9.9 Fixed github.com
Other In versions 0.2.21 and below, the readRequestBody() function in the HTTP transport concatenates request body…CVE-2026-39313 CVE 8.7 Fixed nvd.nist.gov
Suyogsmcp-server-kubernetes Versions 3.4.0 and prior contain an argument injection vulnerability in the port_forward tool in…CVE-2026-39884 CVE 8.1 Fixed nvd.nist.gov
Upsonic Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionalityCVE-2026-30625 CVE 9.8 Research disclosed nvd.nist.gov
Agent Zero Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration…CVE-2026-30624 CVE 8.6 Research disclosed nvd.nist.gov
LangChain LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration…CVE-2026-30617 CVE 8.6 Research disclosed nvd.nist.gov
Windsurf A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands…CVE-2026-30615 CVE 8.0 Research disclosed nvd.nist.gov
Splunk In Splunk MCP Server app versions below 1.0.3 , a user who holds a role with access to the Splunk `_internal`…CVE-2026-20205 CVE 7.2 Research disclosed nvd.nist.gov
MaxKB Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability where the frontend's…CVE-2026-39426 CVE 5.4 Fixed nvd.nist.gov
MaxKB Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability that allows authenticated…CVE-2026-39425 CVE 5.4 Fixed nvd.nist.gov
MicrosoftGithub Copilot Chat Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and…CVE-2026-23653 CVE 6.5 Research disclosed nvd.nist.gov
Chatbox A flaw has been found in chatboxai chatbox up to 1.20.0CVE-2026-6130 CVE 7.3 Research disclosed nvd.nist.gov
MaxKB A vulnerability was found in 1Panel-dev MaxKB up to 2.6.1CVE-2026-6108 CVE 6.3 Research disclosed nvd.nist.gov
Other aws-mcp-server AWS CLI Command Injection Remote Code Execution VulnerabilityCVE-2026-5059 CVE 9.8 Fixed nvd.nist.gov
Other aws-mcp-server Command Injection Remote Code Execution VulnerabilityCVE-2026-5058 CVE 9.8 Fixed nvd.nist.gov
FastGPT Prior to 4.14.10.4, Broken Access Control vulnerability (IDOR/BOLA) allows any authenticated team to access…CVE-2026-40252 CVE 8.1 Fixed nvd.nist.gov
PraisonPraisonAIAgents Prior to 1.5.128, web_crawl's httpx fallback path passes user-supplied URLs directly to ht…CVE-2026-40160 CVE 6.5 Fixed nvd.nist.gov
FastGPT Prior to 4.14.10.3, the /api/core/app/mcpTools/runTool endpoint accepts arbitrary URLs without authenticationCVE-2026-40100 CVE 5.3 Fixed nvd.nist.gov
PraisonPraisonAIAgents Prior to 1.5.128, the web_crawl() function in praisonaiagents/tools/web_crawl_tools.py accepts arbitrary URLs…CVE-2026-40150 CVE 6.5 Fixed nvd.nist.gov
PraisonPraisonAIAgents Prior to 1.5.128, read_skill_file() in skill_tools.py allows reading arbitrary files from the filesystem by…CVE-2026-40117 CVE 7.5 Fixed nvd.nist.gov
PraisonPraisonAI Prior to 4.5.128, the Flask API endpoint in src/praisonai/api.py renders agent output as HTML without…CVE-2026-40112 CVE 6.1 Fixed nvd.nist.gov
PraisonPraisonAIAgents Prior to 1.5.128, he memory hooks executor in praisonaiagents passes a user-controlled command string…CVE-2026-40111 CVE 8.8 Fixed nvd.nist.gov
PraisonPraisonAI Prior to 4.5.121, the execute_command function and workflow shell execution are exposed to user-controlled…CVE-2026-40088 CVE 9.6 Fixed nvd.nist.gov
AGiXT Prior to 1.9.2, the safe_join() function in the essential_abilities extension fails to validate that resolved…CVE-2026-39981 CVE 8.8 Fixed nvd.nist.gov
n8n-MCP Prior to 2.47.4, an authenticated Server-Side Request Forgery in n8n-mcp allows a caller holding a valid…CVE-2026-39974 CVE 8.5 Fixed nvd.nist.gov
ApollographqlApollo MCP Server Prior to version 1.7.0, the Apollo MCP Server did not validate the Host header on incoming HTTP requests when…CVE-2026-35577 CVE 8.1 Fixed nvd.nist.gov
LiteLLM LiteLLM: Password hash exposure and pass-the-hash authentication bypassGHSA-69x8-hrgq-fjj8 GHSA High Fixed github.com
LangChainlangchain-core LangChain has incomplete f-string validation in prompt templatesCVE-2026-40087 CVE 5.3 Fixed github.com
Agentfront\@Frontmcp\/Adapters Prior to 2.3.0, the mcp-from-openapi library uses @apidevtools/json-schema-ref-parser to dereference $ref…CVE-2026-39885 CVE 7.5 Fixed nvd.nist.gov
Zammad Prior to 7.0.1, a server-side template injection vulnerability which leads to RCE via AI Agent existsCVE-2026-34724 CVE 7.2 Fixed nvd.nist.gov
MLflowMCP Java SDK Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerabilityCVE-2026-35568 CVE 5.7 Fixed nvd.nist.gov
oobaboogatext-generation-webui Prior to 4.3, an unauthenticated path traversal vulnerability in load_prompt() allows reading any .txt file…CVE-2026-35487 CVE 5.3 Fixed nvd.nist.gov
oobaboogatext-generation-webui Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user-supplied URLs via requests.get() with…CVE-2026-35486 CVE 7.5 Fixed nvd.nist.gov
Gradio Prior to 4.3, an unauthenticated path traversal vulnerability in load_grammar() allows reading any file on…CVE-2026-35485 CVE 7.5 Fixed nvd.nist.gov
oobaboogatext-generation-webui Prior to 4.3, an unauthenticated path traversal vulnerability in load_preset() allows reading any .yaml file…CVE-2026-35484 CVE 5.3 Fixed nvd.nist.gov
oobaboogatext-generation-webui Prior to 4.3, an unauthenticated path traversal vulnerability in load_template() allows reading files with…CVE-2026-35483 CVE 5.3 Fixed nvd.nist.gov
MLflow MLflow is vulnerable to an authorization bypass affecting the AJAX endpointCVE-2026-33866 CVE 4.3 Fixed github.com
MLflow MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel…CVE-2026-33865 CVE 5.4 Fixed github.com
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by…CVE-2026-24175 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by…CVE-2026-24174 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by…CVE-2026-24173 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker may cause an…CVE-2026-24147 CVE 4.8 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a large…CVE-2026-24146 CVE 7.5 Research disclosed nvd.nist.gov
Hugging Facetransformers HuggingFace Transformers allows for arbitrary code execution in the `Trainer` classCVE-2026-1839 CVE 6.5 Fixed github.com
Mobilenexthqmobile-mcp Prior to 0.0.50, the mobile_open_url tool in mobile-mcp passes user-supplied URLs directly to Android's…CVE-2026-35394 CVE 8.8 Fixed nvd.nist.gov
oobaboogatext-generation-webui Prior to 4.1.1, users can save extention settings in "py" format and in the app root directoryCVE-2026-35050 CVE 8.8 Fixed nvd.nist.gov
FosowlagenticSeek A vulnerability has been found in Fosowl agenticSeek 0.1.0CVE-2026-5584 CVE 9.8 Research disclosed nvd.nist.gov
Other A security vulnerability has been detected in mixelpixx Google-Research-MCP 1e062d7bd887bf…CVE-2026-5470 CVE 6.3 Research disclosed nvd.nist.gov
LiteLLM LiteLLM: Authentication bypass via OIDC userinfo cache key collisionCVE-2026-35030 CVE 9.1 Fixed github.com
LiteLLM LiteLLM: Privilege escalation via unrestricted proxy configuration endpointCVE-2026-35029 CVE 8.8 Fixed github.com
PraisonPraisonAI Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal…CVE-2026-34953 CVE 9.1 Fixed nvd.nist.gov
vLLM vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API ServerCVE-2026-34756 CVE 6.5 Fixed github.com
vLLM vLLM: Denial of Service via Unbounded Frame Count in video/jpeg Base64 ProcessingCVE-2026-34755 CVE 6.5 Fixed github.com
vLLM vLLM: Server-Side Request Forgery (SSRF) in `download_bytes_from_url `CVE-2026-34753 CVE 5.4 Fixed github.com
MicrosoftAzure Web Apps Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose…CVE-2026-32211 CVE 7.5 Research disclosed nvd.nist.gov
JlowinFastMCP Prior to version 3.2.0, while testing the GitHubProvider OAuth integration, which allows authentication to a…CVE-2026-27124 CVE 6.1 Fixed nvd.nist.gov
MLflow mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or…CVE-2026-0545 CVE 9.1 Vendor confirmed github.com
A11y Mcpa11y-mcp A vulnerability was found in priyankark a11y-mcp up to 1.0.5CVE-2026-5323 CVE 5.3 Research disclosed nvd.nist.gov
vLLM vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for…CVE-2026-34760 CVE 7.1 Fixed github.com
MLflowMcp Go Sdk The Go MCP SDK used Go's standard encoding/jsonCVE-2026-34742 CVE 8.1 Fixed nvd.nist.gov
SillyTavern Prior to version 1.17.0, in src/endpoints/search.js, the hostname is checked against /^\d+\.\d+\.\d+\.\d+$/CVE-2026-34526 CVE 5.0 Fixed nvd.nist.gov
SillyTavern Prior to version 1.17.0, a path traversal vulnerability in chat endpoints allows an authenticated attacker to…CVE-2026-34524 CVE 8.8 Fixed nvd.nist.gov
SillyTavern Prior to version 1.17.0, a path traversal vulnerability in the static file route handler allows any…CVE-2026-34523 CVE 5.3 Fixed nvd.nist.gov
SillyTavern Prior to version 1.17.0, a path traversal vulnerability in /api/chats/import allows an authenticated attacker…CVE-2026-34522 CVE 8.1 Fixed nvd.nist.gov
JlowinFastMCP Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing…CVE-2026-32871 CVE 10.0 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI has Broken Access Control in Tool ValvesCVE-2026-34222 CVE 7.7 Fixed osv.dev
Ggmlllama.cpp Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation when a tensor's…CVE-2026-34159 CVE 9.8 Fixed nvd.nist.gov
1millionbotMillie Chatbot Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private…CVE-2026-4400 CVE 6.5 Research disclosed nvd.nist.gov
1millionbotMillie chatbot Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat…CVE-2026-4399 CVE 7.5 Research disclosed nvd.nist.gov
AnthropicClaude SDK for TypeScript From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript…CVE-2026-34451 CVE 5.4 Fixed nvd.nist.gov
MLflowMCP Java SDK Prior to versions 0.83.0, 1.0.1, and 1.1.1, there is a hardcoded wildcard CORS vulnerabilityCVE-2026-34237 CVE 6.1 Fixed nvd.nist.gov
NhostCLI Prior to version 1.41.0, The Nhost CLI MCP server, when explicitly configured to listen on a network port…CVE-2026-34200 CVE 7.5 Fixed nvd.nist.gov
GiskardGiskard Agent Prior to versions 0.3.4 and 1.0.2b1, ChatWorkflow.chat(message) passes its string argument directly as a…CVE-2026-34172 CVE 8.8 Fixed nvd.nist.gov
FastGPT Prior to version 4.14.9.5, FastGPT's MCP (Model Context Protocol) tools endpoints (/api/co…CVE-2026-34163 CVE 7.7 Fixed nvd.nist.gov
FastGPT Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is…CVE-2026-34162 CVE 10.0 Fixed nvd.nist.gov
Other In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and…CVE-2026-30310 CVE 9.8 Research disclosed nvd.nist.gov
Other A directory traversal vulnerability in the agentic-context-engine project versions up to 0.7.1 allows…CVE-2026-29870 CVE 7.6 Research disclosed nvd.nist.gov
MLflow Mlflow: Command Injection when serving models with enable_mlserver=TrueCVE-2026-0596 CVE 9.6 Fixed github.com
PresidioHAI Build In its design for automatic terminal command execution, HAI Build Code Generator offers two options: Execute…CVE-2026-30308 CVE 9.8 Research disclosed nvd.nist.gov
RahmanazharSakaDev In its design for automatic terminal command execution, SakaDev offers two options: Execute safe commands and…CVE-2026-30306 CVE 9.8 Research disclosed nvd.nist.gov
Theunwindaiawesome-llm-apps A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit…CVE-2026-29872 CVE 8.2 Research disclosed nvd.nist.gov
MLflow MLflow Command Injection vulnerabilityCVE-2025-15379 CVE 10.0 Fixed github.com
MLflow MLFlow path traversal vulnerabilityCVE-2025-15036 CVE 9.6 Fixed github.com
localGPT A vulnerability has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054CVE-2026-5002 CVE 7.3 Research disclosed nvd.nist.gov
n8n n8n has XSS in its Credential Management FlowCVE-2026-56359 CVE 5.4 Fixed osv.dev
n8n n8n has a Stored XSS Vulnerability in its Form TriggerCVE-2026-56358 CVE 5.4 Fixed osv.dev
n8n n8n has XSS in Chat Trigger Node through Custom CSSCVE-2026-56356 CVE 5.4 Fixed osv.dev
n8n n8n: Authenticated XSS and Open Redirect via Form NodeCVE-2026-56354 CVE 4.1 Fixed osv.dev
LangChainlangchain-core LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functionsCVE-2026-34070 CVE 7.5 Fixed github.com
Langflow Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership CheckCVE-2026-34046 CVE 8.8 Fixed github.com
Mobilenexthqmobile-mcp Prior to version 0.0.49, the `@mobilenext/mobile-mcp` server contains a Path Traversal vulnerability in the…CVE-2026-33989 CVE 6.5 Fixed nvd.nist.gov
Pab1it0Azure Data Explorer MCP Server Versions up to and including 0.1.1 contain KQL (Kusto Query Language) injection vulnerabilities in three MCP…CVE-2026-33980 CVE 8.1 Research disclosed nvd.nist.gov
MLflowMCP Ruby SDK Prior to version 0.9.2, the Ruby SDK's streamable_http_transport.rb implementation contains a session…CVE-2026-33946 CVE 5.9 Fixed nvd.nist.gov
nanobot Prior to version 0.1.6, an indirect prompt injection vulnerability exists in the email channel processing…CVE-2026-33654 CVE 9.8 Fixed nvd.nist.gov
LibreChat In versions 0.8.2-rc1 through 0.8.3-rc1, user-created MCP (Model Context Protocol) servers can include…CVE-2026-31951 CVE 5.7 Research disclosed nvd.nist.gov
TianguaduizhangAI Code In its design for automatic terminal command execution, AI Code offers two options: Execute safe commands and…CVE-2026-30304 CVE 9.6 Research disclosed nvd.nist.gov
Open WebUIopen-webui Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memoriesCVE-2026-29071 CVE 3.1 Fixed osv.dev
Open WebUIopen-webui Open WebUI has unauthorized deletion of knowledge filesCVE-2026-29070 CVE 5.4 Fixed osv.dev
Open WebUIopen-webui Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwriteCVE-2026-28788 CVE 7.1 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`CVE-2026-28786 CVE 4.3 Fixed osv.dev
vLLM vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-OutCVE-2026-27893 CVE 8.8 Fixed github.com
MLflow MLFlow allows Tracing + Assessments AccessCVE-2025-15381 CVE 8.1 Vendor confirmed github.com
HiJiffy Chatbot Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages…CVE-2026-4263 CVE 6.9 Research disclosed nvd.nist.gov
HiJiffy Chatbot Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages…CVE-2026-4262 CVE 6.9 Research disclosed nvd.nist.gov
Langflow Langflow has Authenticated Code Execution in Agentic Assistant ValidationCVE-2026-33873 CVE 9.9 Fixed github.com
n8n n8n Vulnerable to LDAP Filter Injection in LDAP NodeCVE-2026-33751 CVE 4.8 Fixed osv.dev
n8n n8n Vulnerable to XSS via Binary Data Inline HTML RenderingCVE-2026-33749 CVE 8.9 Fixed osv.dev
n8n n8n has SQL Injection in Data Table Node via orderByColumn ExpressionCVE-2026-33713 CVE 9.9 Fixed osv.dev
n8n n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCECVE-2026-33696 CVE 9.9 Fixed osv.dev
PinchTab PinchTab `v0.8.4` contains a Windows-only command injection issue in the orphaned Chrome cleanup pathCVE-2026-33623 CVE 7.2 Research disclosed nvd.nist.gov
PinchTab PinchTab `v0.8.3` through `v0.8.5` allow arbitrary JavaScript execution through `POST /wait` and `POST…CVE-2026-33622 CVE 8.8 Research disclosed nvd.nist.gov
PinchTab PinchTab `v0.7.7` through `v0.8.4` contain incomplete request-throttling protections for auth-checkable…CVE-2026-33621 CVE 6.5 Research disclosed nvd.nist.gov
PinchTab PinchTab `v0.7.8` through `v0.8.3` accepted the API token from a `token` URL query parameter in addition to…CVE-2026-33620 CVE 4.3 Research disclosed nvd.nist.gov
PinchTab PinchTab v0.8.3 contains a server-side request forgery issue in the optional scheduler's webhook delivery pathCVE-2026-33619 CVE 5.5 Fixed nvd.nist.gov
LiteLLM Two LiteLLM versions published containing credential harvesting malwareGHSA-5mg7-485q-xm76 GHSA Critical Vendor confirmed github.com
n8n n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=noCVE-2026-33724 CVE 5.4 Fixed osv.dev
n8n n8n Has External Secrets Authorization Bypass in Credential SavingCVE-2026-33722 CVE 6.3 Fixed osv.dev
n8n n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACKCVE-2026-33720 CVE 4.7 Fixed osv.dev
n8n n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account TakeoverCVE-2026-33665 CVE 8.2 Fixed osv.dev
n8n n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community…CVE-2026-33663 CVE 9.9 Fixed osv.dev
n8n n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL ModeCVE-2026-33660 CVE 9.9 Fixed osv.dev
QuantumCloud ChatBot Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in…CVE-2026-32499 CVE 9.3 Research disclosed nvd.nist.gov
n8n n8n has In-Process Memory Disclosure in its Task RunnerCVE-2026-27496 CVE 6.5 Fixed osv.dev
Ggmlllama.cpp Prior to b7824, an integer overflow vulnerability in the `ggml_nbytes` function allows an attacker to bypass…CVE-2026-33298 CVE 7.8 Fixed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a…CVE-2026-24158 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruptionCVE-2025-33254 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an…CVE-2025-33238 CVE 7.5 Research disclosed nvd.nist.gov
WP-Chatbot for Messenger The WP-Chatbot for Messenger plugin for WordPress is vulnerable to authorization bypass in all versions up…CVE-2026-3506 CVE 5.3 Research disclosed nvd.nist.gov
Langflow langflow: /profile_pictures/{folder_name}/{file_name} endpoint file readingCVE-2026-33497 CVE 7.5 Fixed github.com
Langflow langflow has Unauthenticated IDOR on Image DownloadsCVE-2026-33484 CVE 7.5 Fixed github.com
PinchTab Versions 0.8.2 and below have a Blind SSRF vulnerability in the /download endpointCVE-2026-33081 CVE 3.7 Fixed nvd.nist.gov
FastGPT In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code…CVE-2026-33075 CVE 8.8 Research disclosed nvd.nist.gov
AnthropicClaude Code Versions prior to 2.1.53 resolved the permission mode from settings files, including the repo-controlled…CVE-2026-33068 CVE 8.8 Fixed nvd.nist.gov
OndataCKAN MCP Server Versions prior to 0.4.85 provide tools including ckan_package_search and sparql_query that accept a base_url…CVE-2026-33060 CVE 5.7 Fixed nvd.nist.gov
Fit2cloudSQLBot Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel…CVE-2026-32950 CVE 8.8 Fixed nvd.nist.gov
Fit2cloudSQLBot Versions prior to 1.7.0 contain a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to…CVE-2026-32949 CVE 7.5 Fixed nvd.nist.gov
Discourse Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, there is an Insecure Direct Object Reference…CVE-2026-32114 CVE 4.3 Fixed nvd.nist.gov
Langflow Langflow has an Arbitrary File Write (RCE) via v2 APICVE-2026-33309 CVE 9.9 Fixed github.com
Fit2cloudSQLBot Versions 1.5.0 and below contain a Stored Prompt Injection vulnerability that chains three flaws: a missing…CVE-2026-32622 CVE 8.8 Fixed nvd.nist.gov
Discourse Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a cross-site scripting vulnerability that…CVE-2026-27740 CVE 6.1 Fixed nvd.nist.gov
Ryan Howard Website LLMs.txt Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan…CVE-2026-27068 CVE 7.1 Research disclosed nvd.nist.gov
MicrosoftCopilot Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot…CVE-2026-26136 CVE 7.5 Research disclosed nvd.nist.gov
Microsoft365 Copilot Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an…CVE-2026-24299 CVE 5.3 Research disclosed nvd.nist.gov
MLflow Arbitrary file write via tar traversal in mlflowCVE-2025-15031 CVE 8.1 Fixed github.com
Langflow Langflow is Missing Ownership Verification in API Key Deletion (IDOR)CVE-2026-33053 CVE 8.8 Fixed github.com
Langflow Unauthenticated Remote Code Execution in Langflow via Public Flow Build EndpointCVE-2026-33017 CVE 9.8 FixedExploited Exploited github.com
Anyscaleray Ray Dashboard is vulnerable to path traversal through its static file handling mechanismCVE-2026-32981 CVE 7.5 Fixed github.com
AmazonAWS API MCP Server Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server…CVE-2026-4270 CVE 5.5 Fixed nvd.nist.gov
Mintplex LabsAnythingLLM In 1.11.1 and earlier, The ImportedPlugin.importCommunityItemFromUrl() function in server/…CVE-2026-32719 CVE 6.4 Research disclosed nvd.nist.gov
Mintplex LabsAnythingLLM In 1.11.1 and earlier, in multi-user mode, AnythingLLM blocks suspended users on the normal JWT-backed…CVE-2026-32717 CVE 2.7 Research disclosed nvd.nist.gov
Mintplex LabsAnythingLLM In 1.11.1 and earlier, The two generic system-preferences endpoints allow manager role access, while every…CVE-2026-32715 CVE 3.8 Research disclosed nvd.nist.gov
Mintplex LabsAnythingLLM In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can…CVE-2026-32628 CVE 8.8 Research disclosed nvd.nist.gov
Mintplex LabsAnythingLLM In 1.11.1 and earlier, AnythingLLM Desktop contains a Streaming Phase XSS vulnerability in the chat rendering…CVE-2026-32626 CVE 9.6 Research disclosed nvd.nist.gov
Mintplex LabsAnythingLLM In 1.11.1 and earlier, On default installations where no password or API key has been configured, all HTTP…CVE-2026-32617 CVE 7.5 Research disclosed nvd.nist.gov
Microsoft365 Copilot AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a networkCVE-2026-26133 CVE 7.1 Research disclosed nvd.nist.gov
JlowinFastMCP Prior to version 2.14.2, the server does not properly respect the resource parameter submitted by the client…CVE-2025-69196 CVE 6.5 Fixed nvd.nist.gov
MLflow MLflow has a command injection in mlflow/sagemaker/__init__.pyCVE-2025-14287 CVE 7.5 Fixed github.com
GetzepGraphiti Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter…CVE-2026-32247 CVE 8.1 Fixed nvd.nist.gov
Hyperterse Prior to v2.2.0, the search tool allows LLMs to search for tools using natural languageCVE-2026-31841 CVE 6.5 Fixed nvd.nist.gov
Ggmlllama.cpp Prior to b8146, the gguf_init_from_file_impl() in gguf.cpp is vulnerable to an Integer overflow, leading to…CVE-2026-27940 CVE 7.8 Fixed nvd.nist.gov
FastGPT In 4.14.7 and earlier, FastGPT's Python Sandbox (fastgpt-sandbox) includes guardrails intended to prevent…CVE-2026-32128 CVE 6.3 Research disclosed nvd.nist.gov
Homeassistant AiHome Assistant MCP Server Prior to 7.0.0, the ha-mcp OAuth consent form renders user-controlled parameters via Python f-strings with no…CVE-2026-32112 CVE 4.7 Fixed nvd.nist.gov
Homeassistant AiHome Assistant MCP Server Prior to 7.0.0, the ha-mcp OAuth consent form (beta feature) accepts a user-supplied ha_url and makes a…CVE-2026-32111 CVE 5.3 Fixed nvd.nist.gov
HarvardPingPong Prior to 7.27.2, an authenticated user may be able to retrieve or delete files outside the intended…CVE-2026-32097 CVE 8.8 Fixed nvd.nist.gov
Cursor Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may attempt to follow…CVE-2026-31854 CVE 8.8 Fixed nvd.nist.gov
OpenClaw A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute…CVE-2026-30741 CVE 9.8 Research disclosed nvd.nist.gov
FlowiseAIflowise Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network AccessCVE-2026-31829 CVE 8.8 Fixed github.com
SoopersetMCP Atlassian Prior to version 0.17.0, an unauthenticated attacker who can reach the mcp-atlassian HTTP endpoint can force…CVE-2026-27826 CVE 8.2 Fixed nvd.nist.gov
MCP Atlassian Prior to version 0.17.0, the `confluence_download_attachment` MCP tool accepts a `download_path` parameter…CVE-2026-27825 CVE 8.0 Fixed nvd.nist.gov
MicrosoftAzure MCP Server Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges…CVE-2026-26118 CVE 8.8 Research disclosed nvd.nist.gov
vLLM vLLM has SSRF Protection BypassCVE-2026-25960 CVE 9.8 Fixed github.com
TencentWeKnora From version 0.2.5 to before version 0.2.10, an unauthenticated remote code execution (RCE) vulnerability…CVE-2026-30861 CVE 8.8 Fixed nvd.nist.gov
TencentWeKnora Prior to version 0.2.12, a remote code execution (RCE) vulnerability exists in the application's database…CVE-2026-30860 CVE 9.8 Fixed nvd.nist.gov
TencentWeKnora Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any…CVE-2026-30859 CVE 6.5 Fixed nvd.nist.gov
TencentWeKnora Prior to version 0.3.0, a DNS rebinding vulnerability in the web_fetch tool allows an unauthenticated…CVE-2026-30858 CVE 7.5 Fixed nvd.nist.gov
TencentWeKnora Prior to version 0.3.0, a cross-tenant authorization bypass in the knowledge base copy endpoint allows any…CVE-2026-30857 CVE 5.3 Fixed nvd.nist.gov
TencentWeKnora Prior to version 0.3.0, a vulnerability involving tool name collision and indirect prompt injection allows a…CVE-2026-30856 CVE 7.6 Fixed nvd.nist.gov
TencentWeKnora Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows…CVE-2026-30855 CVE 8.8 Fixed nvd.nist.gov
PinchTab Prior to version 0.7.7, a Server-Side Request Forgery (SSRF) vulnerability in the /download endpoint allows…CVE-2026-30834 CVE 7.5 Fixed nvd.nist.gov
TencentWeKnora Prior to version 0.2.12, the application's "Import document via URL" feature is vulnerable to Server-Side…CVE-2026-30247 CVE 7.5 Fixed nvd.nist.gov
FlowiseAIflowise Flowise Missing Authentication on NVIDIA NIM EndpointsCVE-2026-30824 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise has IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO ConfigurationCVE-2026-30823 CVE 8.8 Fixed github.com
FlowiseAIflowise Flowise Allows Mass Assignment in `/api/v1/leads` EndpointCVE-2026-30822 CVE 7.7 Fixed github.com
FlowiseAIflowise Flowise has Arbitrary File Upload via MIME SpoofingCVE-2026-30821 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise has Authorization Bypass via Spoofed x-request-from HeaderCVE-2026-30820 CVE 8.8 Fixed github.com
MLflowAgentgateway Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and…CVE-2026-29791 CVE 6.5 Fixed nvd.nist.gov
GitHubCopilot Command Line Interface The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code…CVE-2026-29783 CVE 7.8 Fixed nvd.nist.gov
Zhongyu09OpenChatBI Prior to version 0.2.2, the save_report tool in openchatbi/tool/save_report.py suffers from a critical path…CVE-2026-28795 CVE 9.8 Fixed nvd.nist.gov
LangBot Prior to version 4.8.7, LangBot’s web UI renders user-supplied raw HTML using rehypeRaw, which can lead to a…CVE-2026-28509 CVE 5.4 Fixed nvd.nist.gov
FlowiseAIflowise Flowise has Insufficient Password Salt RoundsCVE-2026-56272 CVE 4.1 Fixed github.com
FlowiseAIflowise Flowise Vulnerable to PII Disclosure on Unauthenticated Forgot Password EndpointCVE-2026-56267 CVE Medium Fixed github.com
OpenClaw OpenClaw versions prior to 2026.2.14 contain server-side request forgery vulnerabilities in the Feishu…CVE-2026-28451 CVE 9.3 Fixed nvd.nist.gov
LangChainlanggraph LangGraph checkpoint loading has unsafe msgpack deserializationCVE-2026-28277 CVE 6.8 Fixed github.com
NLTK A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in…CVE-2026-0847 CVE 7.5 Research disclosed nvd.nist.gov
Dify Prior to 1.11.2, Dify is vulnerable to a stored XSS issue when rendering Mermaid diagrams within chatsCVE-2026-21866 CVE 5.4 Fixed nvd.nist.gov
AI ChatBot with ChatGPT and Content Generator by AYS The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized…CVE-2026-1336 CVE 5.3 Fixed nvd.nist.gov
Other A security vulnerability has been detected in LLM-Claw 0.1.0/0.1.1/0.1.1a/0.1.1a-p1CVE-2025-12345 CVE 8.8 Research disclosed nvd.nist.gov
Gradio Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config ProcessingCVE-2026-28416 CVE 8.2 Fixed github.com
Gradio Gradio has an Open Redirect in its OAuth FlowCVE-2026-28415 CVE 4.3 Fixed github.com
Gradio Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+CVE-2026-28414 CVE 7.5 Fixed github.com
Other Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using DockerCVE-2026-28400 CVE 7.5 Fixed nvd.nist.gov
Dify Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an…CVE-2026-28288 CVE 5.3 Fixed nvd.nist.gov
Gradio Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session SecretCVE-2026-27167 CVE 0.0 Fixed github.com
n8n n8n has Webhook Forgery on Zendesk Trigger NodeCVE-2026-56360 CVE 4.0 Fixed osv.dev
n8n n8n: Webhook Forgery on Github Webhook TriggerCVE-2026-56357 CVE 4.0 Fixed osv.dev
n8n n8n has an Authentication Bypass in its Chat Trigger NodeCVE-2026-56353 CVE 4.8 Fixed osv.dev
n8n n8n: SQL Injection in MySQL, PostgreSQL, and Microsoft SQL nodesCVE-2026-56351 CVE 8.2 Fixed osv.dev
n8n n8n has an SSO Enforcement Bypass in its Self-Service Settings APICVE-2026-56350 CVE 6.3 Fixed osv.dev
n8n n8n has a Guardrail Node BypassCVE-2026-56349 CVE 3.7 Fixed osv.dev
Zed Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools…CVE-2026-27967 CVE 7.1 Fixed nvd.nist.gov
Langflow Langflow has Remote Code Execution in CSV AgentCVE-2026-27966 CVE 9.8 Fixed github.com
MLflowModel Context Protocol Servers In mcp-server-git versions prior to 2026.1.14, the git_add tool did not validate that file paths provided in…CVE-2026-27735 CVE 6.5 Fixed nvd.nist.gov
LangChain Prior to version 1.1.8, a redirect-based Server-Side Request Forgery (SSRF) bypass exists in…CVE-2026-27795 CVE 7.4 Fixed nvd.nist.gov
ParseplatformParse Dashboard In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) lacks…CVE-2026-27609 CVE 6.5 Research disclosed nvd.nist.gov
ParseplatformParse Dashboard In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) does…CVE-2026-27608 CVE 8.1 Research disclosed nvd.nist.gov
AgentfrontEnclave Prior to version 2.11.1, it is possible to escape the security boundraries set by `@enclave-vm/core`, which…CVE-2026-27597 CVE 10.0 Fixed nvd.nist.gov
ParseplatformParse Dashboard In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (POST `/apps/:appId/agent`) has…CVE-2026-27595 CVE 7.5 Research disclosed nvd.nist.gov
n8n n8n Vulnerable to Stored XSS via Various NodesCVE-2026-27578 CVE 5.4 Fixed osv.dev
n8n n8n: Expression Sandbox Escape Leads to RCECVE-2026-27577 CVE 9.9 Fixed osv.dev
n8n n8n has Arbitrary Command Execution via File Write and Git OperationsCVE-2026-27498 CVE 8.5 Fixed osv.dev
n8n n8n has Potential Remote Code Execution via Merge NodeCVE-2026-27497 CVE 9.9 Fixed osv.dev
n8n n8n has a Sandbox Escape in its JavaScript Task RunnerCVE-2026-27495 CVE Critical Fixed osv.dev
n8n n8n has Arbitrary File Read via Python Code Node Sandbox EscapeCVE-2026-27494 CVE 9.9 Fixed osv.dev
n8n n8n has Unauthenticated Expression Evaluation via Form NodeCVE-2026-27493 CVE 9.0 Fixed osv.dev
Other All versions are vulnerable to Environment Variable Injection through the updateEnvFile functionCVE-2026-27203 CVE 8.3 Research disclosed nvd.nist.gov
MLflow MLflow Use of Default Password Authentication Bypass VulnerabilityCVE-2026-2635 CVE 9.8 Fixed github.com
MLflow MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution VulnerabilityCVE-2026-2033 CVE 8.1 Fixed github.com
Anyscaleray Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)CVE-2026-27482 CVE 5.9 Fixed github.com
OpenClaw Prior to version 2026.2.15, OpenClaw embedded the current working directory (workspace path) into the agent…CVE-2026-27001 CVE 7.8 Fixed nvd.nist.gov
OpenClaw In versions 2026.1.12 through 2026.2.12, OpenClaw browser download helpers accepted an unsanitized output pathCVE-2026-26972 CVE 6.7 Research disclosed nvd.nist.gov
Other Missing Authorization vulnerability in cliengo Cliengo – Chatbot cliengo allows Exploiting Incorrectly…CVE-2025-69388 CVE 6.5 Research disclosed nvd.nist.gov
OpenClaw Prior to OpenClaw version 2026.2.14, the Feishu extension previously allowed `sendMediaFeishu` to treat…CVE-2026-26321 CVE 7.5 Fixed nvd.nist.gov
SillyTavern In versions prior to 1.16.0, a Server-Side Request Forgery (SSRF) vulnerability in the asset download…CVE-2026-26286 CVE 8.5 Fixed nvd.nist.gov
CiscoSkill Scanner A vulnerability in the API Server of Skill Scanner could allow a unauthenticated, remote attacker to interact…CVE-2026-26057 CVE 9.1 Research disclosed nvd.nist.gov
Ays Pro AI ChatBot Missing Authorization vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS…CVE-2026-25338 CVE 5.3 Research disclosed nvd.nist.gov
OpenClaw In versions 2026.2.2 and below, when the Slack integration is enabled, channel metadata (topic/description)…CVE-2026-24764 CVE 3.7 Fixed nvd.nist.gov
Smartsupp The Smartsupp – live chat, AI shopping assistant and chatbots plugin for WordPress is vulnerable to Stored…CVE-2025-12448 CVE 6.4 Research disclosed nvd.nist.gov
Chatbot for WordPress by Collect.chat The Chatbot for WordPress by Collect.chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting…CVE-2026-0736 CVE 6.4 Research disclosed nvd.nist.gov
Cursor Sandbox escape via writing .git configuration was possible in versions prior to 2.5CVE-2026-26268 CVE 9.9 Fixed nvd.nist.gov
Milvus Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypassesCVE-2026-26190 CVE 9.8 Fixed nvd.nist.gov
AI Playground Summary A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the AI Playground's OAuth…CVE-2026-1721 CVE 6.2 Fixed nvd.nist.gov
FastGPT Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. need to initiate data acquisition…CVE-2026-26075 CVE 5.4 Fixed nvd.nist.gov
Other A command injection vulnerability exists in sf-mcp-server due to unsafe use of child_process.exec when…CVE-2026-26029 CVE 7.5 Research disclosed nvd.nist.gov
Dify Prior to 1.13.0, a cross site scripting vulnerability has been found in the web application chat frontend…CVE-2026-26023 CVE 6.1 Fixed nvd.nist.gov
LangChain Prior to 1.1.14, the RecursiveUrlLoader class in @langchain/community is a web crawler that recursively…CVE-2026-26019 CVE 4.1 Fixed nvd.nist.gov
LangChainlangchain-core LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messagesCVE-2026-26013 CVE 3.7 Fixed github.com
FastGPT From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without…CVE-2026-26003 CVE 5.4 Fixed nvd.nist.gov
MicrosoftVisual Studio Code Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized…CVE-2026-21523 CVE 8.0 Research disclosed nvd.nist.gov
MicrosoftVisual Studio Code Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and…CVE-2026-21518 CVE 8.8 Research disclosed nvd.nist.gov
MicrosoftGithub Copilot Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows…CVE-2026-21516 CVE 7.8 Research disclosed nvd.nist.gov
MicrosoftVisual Studio 2022 Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and…CVE-2026-21257 CVE 8.0 Research disclosed nvd.nist.gov
MicrosoftVisual Studio 2022 Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and…CVE-2026-21256 CVE 8.8 Research disclosed nvd.nist.gov
Other The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code…CVE-2026-25905 CVE 5.8 Research disclosed nvd.nist.gov
AnthropicClaude Code Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to properly protect the…CVE-2026-25725 CVE 10.0 Fixed nvd.nist.gov
AnthropicClaude Code Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when…CVE-2026-25724 CVE 7.5 Fixed nvd.nist.gov
AnthropicClaude Code Prior to version 2.0.55, Claude Code failed to properly validate commands using piped sed operations with the…CVE-2026-25723 CVE 6.5 Fixed nvd.nist.gov
AnthropicClaude Code Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write…CVE-2026-25722 CVE 9.1 Fixed nvd.nist.gov
Smn2gntMCP Salesforce Connector Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth tokenCVE-2026-25650 CVE 7.5 Fixed nvd.nist.gov
Qdrant From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an…CVE-2026-25628 CVE 8.8 Fixed nvd.nist.gov
Semantic Kernel Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel…CVE-2026-25592 CVE 9.9 Fixed nvd.nist.gov
AgentfrontEnclave Prior to 2.10.1, the existing layers of security in enclave-vm are insufficient: The AST sanitization can be…CVE-2026-25533 CVE 8.8 Fixed nvd.nist.gov
AlgonetOrcaStatLLM Researcher A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in…CVE-2026-24903 CVE 5.4 Research disclosed nvd.nist.gov
n8n n8n's domain allowlist bypass enables credential exfiltrationCVE-2026-25631 CVE Medium Fixed osv.dev
Coding SoloGodot MCP Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code executionCVE-2026-25546 CVE 7.8 Fixed nvd.nist.gov
Model Context Protocol@modelcontextprotocol/sdk @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuseCVE-2026-25536 CVE 7.1 Fixed github.com
n8n n8n has a Python sandbox escapeCVE-2026-25115 CVE 9.9 Fixed osv.dev
n8n n8n Merge Node has Arbitrary File Write leading to RCECVE-2026-25056 CVE Critical Fixed osv.dev
n8n n8n Vulnerable to Arbitrary File Write on Remote Systems via SSH NodeCVE-2026-25055 CVE High Fixed osv.dev
n8n n8n Has Stored Cross-site Scripting via Markdown Rendering in Workflow UICVE-2026-25054 CVE High Fixed osv.dev
n8n n8n has OS Command Injection in Git NodeCVE-2026-25053 CVE Critical Fixed osv.dev
n8n n8n's Improper File Access Controls Allow Arbitrary File Read by Authenticated UsersCVE-2026-25052 CVE Critical Fixed osv.dev
n8n n8n's Improper CSP Enforcement in Webhook Responses May Allow Stored XSSCVE-2026-25051 CVE High Fixed osv.dev
n8n n8n Has Expression Escape Vulnerability Leading to RCECVE-2026-25049 CVE Critical Fixed osv.dev
n8n n8n Vulnerable to Command Injection in Community Package InstallationCVE-2026-21893 CVE Critical Fixed osv.dev
n8n n8n's Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task RunnerCVE-2025-61917 CVE 7.7 Fixed osv.dev
AnthropicClaude Code Prior to version 2.0.72, due to an error in command parsing, it was possible to bypass the Claude Code…CVE-2026-24887 CVE 8.8 Fixed nvd.nist.gov
AnthropicClaude Code Prior to version 2.0.74, due to a Bash command validation flaw in parsing ZSH clobber syntax, it was possible…CVE-2026-24053 CVE 6.5 Fixed nvd.nist.gov
AnthropicClaude Code Prior to version 1.0.111, Claude Code contained insufficient URL validation in its trusted domain…CVE-2026-24052 CVE 7.4 Fixed nvd.nist.gov
vLLM vLLM has RCE In Video ProcessingCVE-2026-22778 CVE 9.8 Fixed github.com
LlamaIndexllama-index-core llama-index-core vulnerable to Uncontrolled Resource ConsumptionCVE-2025-6208 CVE 5.3 Fixed github.com
MLflow mlflow Creates of Temporary File in Directory with Insecure PermissionsCVE-2025-10279 CVE 7.0 Fixed github.com
LobeHub@lobehub/chat LobeHub Vulnerable to Improper Authorization in Presigned UploadCVE-2026-23835 CVE Medium Fixed github.com
AI Engine The AI Engine – The Chatbot and AI Framework for WordPress plugin for WordPress is vulnerable to arbitrary…CVE-2026-1400 CVE 7.2 Research disclosed nvd.nist.gov
vLLM vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnectorCVE-2026-24779 CVE 7.1 Fixed github.com
Mintplex LabsAnythingLLM Prior to version 1.10.0, a critical Path Traversal vulnerability in the DrupalWiki integration allows a…CVE-2026-24478 CVE 7.2 Fixed nvd.nist.gov
Mintplex LabsAnythingLLM If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key…CVE-2026-24477 CVE 7.5 Fixed nvd.nist.gov
n8n n8n Unsafe Workflow Expression Evaluation Allows Remote Code ExecutionCVE-2026-1470 CVE 9.9 Fixed osv.dev
ChatterMate In versions 1.0.8 and below, the chatbot accepts and executes malicious HTML/JavaScript payloads when…CVE-2026-24399 CVE 5.4 Fixed nvd.nist.gov
Kalrav AI Agent The Kalrav AI Agent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…CVE-2025-13374 CVE 9.8 Research disclosed nvd.nist.gov
Langflow Langflow affected by Remote Code Execution via validate_code() exec()CVE-2026-0770 CVE High Vendor confirmedExploited Exploited github.com
Ollamagithub.com/ollama/ollama Ollama MCP Server execAsync Command Injection Remote Code Execution VulnerabilityCVE-2025-15063 CVE 9.8 Fixed nvd.nist.gov
Other Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution VulnerabilityCVE-2025-15061 CVE 9.8 Fixed nvd.nist.gov
Other The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is…CVE-2025-13921 CVE 4.3 Fixed nvd.nist.gov
Microsoft365 Copilot Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose…CVE-2026-24307 CVE 7.5 Research disclosed nvd.nist.gov
Langfuse In versions 3.146.0 and below, the /api/public/slack/install endpoint initiates Slack OAuth using a projectId…CVE-2026-24055 CVE 5.3 Fixed nvd.nist.gov
Microsoft365 Word Copilot Improper neutralization of escape, meta, or control sequences in Copilot allows an unauthorized attacker to…CVE-2026-21521 CVE 7.4 Research disclosed nvd.nist.gov
MicrosoftCopilot Studio Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated…CVE-2026-21520 CVE 7.5 Research disclosed nvd.nist.gov
TypeBot In versions prior to 3.13.2, client-side script execution in Typebot allows stealing all stored credentials…CVE-2025-65098 CVE 7.4 Fixed nvd.nist.gov
vLLM vLLM affected by RCE via auto_map dynamic module loading during model initializationCVE-2026-22807 CVE 9.8 Fixed github.com
5ire Prior to version 0.15.3, an unsafe option parsing vulnerability in the ECharts Markdown plugin allows any…CVE-2026-22793 CVE 9.6 Fixed nvd.nist.gov
5ire Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML (including on* event attributes) to…CVE-2026-22792 CVE 9.6 Fixed nvd.nist.gov
AnthropicClaude Code Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed malicious repositories to…CVE-2026-21852 CVE 7.5 Fixed nvd.nist.gov
Fit2cloudSQLBot Versions prior to 1.5.0 contain a missing authentication vulnerability in the /api/v1/datasource/uploadExcel…CVE-2025-69285 CVE 6.1 Fixed nvd.nist.gov
LobeHub@lobehub/chat Lobe Chat affected by Cross-Site Scripting(XSS) that can escalate to Remote Code Execution(RCE)CVE-2026-23733 CVE 9.6 Vendor confirmed github.com
LobeHub@lobehub/chat Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File DeletionCVE-2026-23522 CVE 3.7 Vendor confirmed github.com
CrawlChat Prior to version 0.0.8, a non-existing permission check for the CrawlChat's Discord bot allows non-manage…CVE-2026-23875 CVE 5.4 Fixed nvd.nist.gov
MCPJaminspector Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an…CVE-2026-23744 CVE 9.8 Research disclosed nvd.nist.gov
OpenagentplatformDive Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without…CVE-2026-23523 CVE 8.8 Fixed nvd.nist.gov
CodewithcjSparkyFitness SparkyFitness v0.15.8.2 is vulnerable to Cross Site Scripting (XSS) via user input and LLM outputCVE-2025-65368 CVE 6.1 Research disclosed nvd.nist.gov
Cursor Prior to 2.3, hen the Cursor Agent is running in Auto-Run Mode with Allowlist mode enabled, certain shell…CVE-2026-22708 CVE 9.8 Fixed nvd.nist.gov
AgentfrontEnclave Prior to 2.7.0, there is a critical sandbox escape vulnerability in enclave-vm that allows untrusted…CVE-2026-22686 CVE 10.0 Fixed nvd.nist.gov
Other The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is…CVE-2025-15266 CVE 7.2 Research disclosed nvd.nist.gov
n8n n8n: Webhook Node IP Whitelist Bypass via Partial String MatchingCVE-2025-68949 CVE 5.3 Fixed osv.dev
AnomaOpenCode The markdown renderer used for LLM responses will insert arbitrary HTML into the DOMCVE-2026-22813 CVE 6.1 Fixed nvd.nist.gov
orval orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specificationCVE-2026-22785 CVE 9.8 Fixed nvd.nist.gov
BusymacPal Mcp Server A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to…CVE-2025-66689 CVE 6.5 Fixed nvd.nist.gov
MLflow MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validationCVE-2025-14279 CVE 8.1 Fixed github.com
LangChain LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS)…CVE-2024-58340 CVE 7.5 Research disclosed nvd.nist.gov
LlamaIndexllama-index LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource…CVE-2024-58339 CVE 7.5 Fixed osv.dev
LlamaIndexllama-index LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization…CVE-2024-14021 CVE 7.8 Fixed osv.dev
vLLM vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensionsCVE-2026-22773 CVE 7.5 Fixed github.com
TencentWeKnora Prior to version 0.2.5, there is a command injection vulnerability that allows authenticated users to inject…CVE-2026-22688 CVE 8.8 Fixed nvd.nist.gov
TencentWeKnora Prior to version 0.2.5, after WeKnora enables the Agent service, it allows users to call the database query…CVE-2026-22687 CVE 9.8 Fixed nvd.nist.gov
vLLM vLLM introduced enhanced protection for CVE-2025-62164CVE-2026-56340 CVE 8.8 Fixed github.com
Ggmlllama.cpp In commits 55d4206c8 and prior, the n_discard parameter is parsed directly from JSON input in the llama.cpp…CVE-2026-21869 CVE 9.8 Research disclosed nvd.nist.gov
n8n n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged WebhooksCVE-2026-21894 CVE 6.5 Fixed osv.dev
n8n n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request HandlingCVE-2026-21858 CVE 10.0 Fixed osv.dev
MicrosoftMicrosoft Playwright MCP Server Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming…CVE-2025-9611 CVE 7.2 Fixed nvd.nist.gov
Sylphxfilesystem-mcp Version 0.5.8 of filesystem-mcp contains a critical path traversal vulnerability in its "read_content" toolCVE-2025-67366 CVE 7.5 Fixed nvd.nist.gov
HcltechswHCL DevOps Deploy In HCL DevOps Deploy 8.1.2.0 through 8.1.2.3, a user with LLM configuration privileges may be able to recover…CVE-2025-62327 CVE 4.9 Research disclosed nvd.nist.gov
AI BotKit The AI BotKit – AI Chatbot & Live Support for WordPress plugin for WordPress is vulnerable to Stored…CVE-2025-13887 CVE 6.4 Research disclosed nvd.nist.gov
n8n n8n Vulnerable to RCE via Arbitrary File WriteCVE-2026-21877 CVE 9.9 Fixed osv.dev
Model Context Protocol@modelcontextprotocol/sdk Anthropic's MCP TypeScript SDK has a ReDoS vulnerabilityCVE-2026-0621 CVE High Fixed github.com
Dify Prior to version 1.11.0, the API key is exposed in plaintext to the frontend, allowing non-administrator…CVE-2025-67732 CVE 6.5 Fixed nvd.nist.gov
Mintplex LabsAnythingLLM Prior to commit e287fab56089cf8fcea9ba579a3ecdeca0daa313, the password recovery endpoint returns different…CVE-2026-21484 CVE 5.3 Fixed nvd.nist.gov
Langflow Langflow Missing Authentication on Critical API EndpointsCVE-2026-21445 CVE High Fixed github.com
Other Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly…CVE-2025-62116 CVE 5.3 Research disclosed nvd.nist.gov
Serverless Starting in version 4.29.0 and prior to version 4.29.3, a command injection vulnerability exists in the…CVE-2025-69256 CVE 7.5 Fixed nvd.nist.gov
n8n Self-hosted n8n has Legacy Code node that enables arbitrary file read/writeCVE-2025-68697 CVE 7.1 Fixed osv.dev
n8n n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code NodeCVE-2025-68668 CVE 9.9 Fixed osv.dev
InternlmLMDeploy Prior to version 0.11.1, an insecure deserialization vulnerability exists in lmdeploy where torch.load() is…CVE-2025-67729 CVE 8.8 Fixed nvd.nist.gov
n8n n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe SandboxCVE-2025-61914 CVE 7.3 Fixed osv.dev
5ire In versions 0.15.2 and prior, an RCE vulnerability exists in useMarkdown.ts, where the markdown-it-mermaid…CVE-2025-68669 CVE 9.6 Research disclosed nvd.nist.gov
LangChain Prior to @langchain/core versions 0.3.80 and 1.1.8, and prior to langchain versions 0.3.37 and 1.2.3, a…CVE-2025-68665 CVE 9.1 Fixed nvd.nist.gov
Hugging Facetransformers Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution VulnerabilityCVE-2025-14930 CVE 7.8 Research disclosed osv.dev
Hugging Facetransformers Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code…CVE-2025-14929 CVE 7.8 Research disclosed osv.dev
Hugging Facetransformers Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution VulnerabilityCVE-2025-14928 CVE 7.8 Research disclosed osv.dev
Hugging Facetransformers Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution VulnerabilityCVE-2025-14927 CVE 7.8 Research disclosed osv.dev
Hugging Facetransformers Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution VulnerabilityCVE-2025-14926 CVE 7.8 Research disclosed osv.dev
Hugging Facetransformers Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution VulnerabilityCVE-2025-14924 CVE 7.8 Research disclosed osv.dev
Hugging Facetransformers Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution…CVE-2025-14921 CVE 7.8 Research disclosed osv.dev
Hugging Facetransformers Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution…CVE-2025-14920 CVE 7.8 Research disclosed osv.dev
LangChainlangchain-core LangGrinch serialization injection enables secret extraction in langchain-coreAIS-2025-016 Incident 8.2 Fixed github.com
n8n n8n Vulnerable to Remote Code Execution via Expression InjectionCVE-2025-68613 CVE 9.9 FixedExploited Exploited osv.dev
GtedgeGT Edge AI Incorrect access control in the /api/v1/conversations/*/messages API of GT Edge AI Platform before…CVE-2025-63664 CVE 7.5 Fixed nvd.nist.gov
Langflow External Control of File Name or Path in LangflowCVE-2025-68478 CVE 7.1 Fixed github.com
Langflow Langflow vulnerable to Server-Side Request ForgeryCVE-2025-68477 CVE 7.7 Fixed github.com
OpenagentplatformDive A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.1 in the Mermaid…CVE-2025-66580 CVE 9.6 Fixed nvd.nist.gov
Ollamagithub.com/ollama/ollama Ollama Platform has missing authentication enabling attackers to perform model management operationsCVE-2025-63389 CVE Critical Vendor confirmed github.com
WP Messiah WP AI CoPilot Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot…CVE-2025-62998 CVE 5.0 Research disclosed nvd.nist.gov
Zed Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-preCVE-2025-68433 CVE 7.3 Fixed nvd.nist.gov
MLflowModel Context Protocol Servers In mcp-server-git versions prior to 2025.9.25, the git_init tool accepted arbitrary filesystem paths and…CVE-2025-68143 CVE 8.8 Fixed nvd.nist.gov
IBMDevOps Deploy IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration…CVE-2025-14148 CVE 6.5 Research disclosed nvd.nist.gov
AliasroboticsCybersecurity AI Versions 0.5.9 and below are vulnerable to Command Injection through the run_ssh_command_with_credentials()…CVE-2025-67511 CVE 9.6 Research disclosed nvd.nist.gov
Neuron AiNeuron In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using…CVE-2025-67510 CVE 9.4 Fixed nvd.nist.gov
Neuron AiNeuron Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only BypassCVE-2025-67509 CVE 8.2 Fixed nvd.nist.gov
ThinkinaiDeepChat Versions 0.5.1 and below are vulnerable to XSS attacks through improperly sanitized Mermaid contentCVE-2025-66481 CVE 9.6 Research disclosed nvd.nist.gov
MicrosoftGithub Copilot Improper neutralization of special elements used in a command ('command injection') in Copilot allows an…CVE-2025-64671 CVE 7.8 Research disclosed nvd.nist.gov
WP Messiah WP AI CoPilot Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot…CVE-2025-62994 CVE 4.3 Research disclosed nvd.nist.gov
n8n n8n vulnerable to Remote Code Execution via Git Node Custom Pre-Commit HookCVE-2025-65964 CVE Critical Fixed osv.dev
Langflow Langflow CORS misconfiguration enables Account Takeover and RCECVE-2025-34291 CVE 8.8 FixedExploited Exploited github.com
BreadbutterBread \& Butter The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin…CVE-2025-12189 CVE 8.8 Research disclosed nvd.nist.gov
Open WebUIopen-webui Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in…CVE-2025-65958 CVE 8.5 Fixed osv.dev
Open WebUIopen-webui open-webui is Vulnerable to Incorrect Access ControlCVE-2025-63681 CVE 4.3 Fixed nvd.nist.gov
SuyogsMCP Server Kubernetes Prior to 2.9.8, there is a security issue exists in the exec_in_pod tool of the mcp-server-kubernetes MCP…CVE-2025-66404 CVE 8.8 Fixed nvd.nist.gov
AnthropicClaude Code Prior to 1.0.93, Due to errors in parsing shell commands related to $IFS and short CLI flags, it was possible…CVE-2025-66032 CVE 9.8 Fixed nvd.nist.gov
DockerMCP Gateway MCP Gateway allows easy and secure running and deployment of MCP serversCVE-2025-64443 CVE 9.6 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for…CVE-2025-33201 CVE 7.5 Research disclosed nvd.nist.gov
MCP In Splunk MCP Server app versions below 0.2.4, a user with access to the "run_splunk_query" Model Context…CVE-2025-20381 CVE 5.4 Research disclosed nvd.nist.gov
MxChat The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in…CVE-2025-12585 CVE 5.3 Research disclosed nvd.nist.gov
ArcadeArcade MCP Arcade MCP allows you to to create, deploy, and share MCP ServersCVE-2025-66454 CVE 6.5 Fixed nvd.nist.gov
Model Context Protocolmcp Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by defaultCVE-2025-66416 CVE 8.1 Fixed github.com
Model Context Protocol@modelcontextprotocol/sdk Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by defaultCVE-2025-66414 CVE 8.1 Fixed github.com
vLLM vLLM vulnerable to remote code execution via transformers_utils/get_configCVE-2025-66448 CVE 8.8 Fixed github.com
KapildurapheMCP Watch In 0.1.2 and earlier, the MCPScanner class contains a critical Command Injection vulnerability in the…CVE-2025-66401 CVE 9.8 Research disclosed nvd.nist.gov
September of By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the…CVE-2025-35028 CVE 9.1 Research disclosed nvd.nist.gov
LibreChat Prior to version 0.8.1-rc2, LibreChat is vulnerable to Server-side Request Forgery (SSRF), by passing…CVE-2025-66201 CVE 8.1 Fixed nvd.nist.gov
Anyscaleray Ray's New Token Authentication is Disabled By DefaultCVE-2025-34351 CVE Critical Vendor confirmed github.com
AI ChatBot with ChatGPT and Content Generator by AYS The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized…CVE-2025-13381 CVE 5.3 Research disclosed nvd.nist.gov
AI ChatBot with ChatGPT and Content Generator by AYS The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Server-Side…CVE-2025-13378 CVE 6.5 Research disclosed nvd.nist.gov
Anyscaleray Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding AttackCVE-2025-62593 CVE Critical FixedExploited Exploited github.com
NVIDIANeMo NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where…CVE-2025-33204 CVE 7.8 Research disclosed nvd.nist.gov
Langfuse In versions from 2.95.0 to before 2.95.12 and from 3.17.0 to before 3.131.0, in SSO provider configurations…CVE-2025-65107 CVE 6.5 Fixed nvd.nist.gov
AnthropicClaude Code Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code…CVE-2025-64755 CVE 9.8 Fixed nvd.nist.gov
S2B AI Assistant The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable…CVE-2025-12973 CVE 7.2 Research disclosed nvd.nist.gov
LangChainlangchain-core LangChain Vulnerable to Template Injection via Attribute Access in Prompt TemplatesCVE-2025-65106 CVE 8.3 Fixed github.com
MicrosoftVisual Studio Code Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute…CVE-2025-64660 CVE 8.0 Research disclosed nvd.nist.gov
vLLM vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted…CVE-2025-62426 CVE 6.5 Fixed github.com
vLLM vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputsCVE-2025-62372 CVE 6.5 Fixed github.com
vLLM vLLM deserialization vulnerability leading to DoS and potential RCECVE-2025-62164 CVE 8.8 Fixed github.com
AnthropicClaude Code Prior to version 1.0.39, when running on a machine with Yarn 3.0 or above, Claude Code could have been…CVE-2025-65099 CVE 9.8 Fixed nvd.nist.gov
FlowiseAIflowise Flowise has Authentication Bypass Using Unprotected Registration Endpoint (/register)CVE-2025-71327 CVE High Vendor confirmed github.com
FlowiseAIflowise Flowise Fails to Invalidate Existing Sessions After Password ChangesCVE-2025-71335 CVE 8.1 Fixed github.com
TypeBot In versions prior to 3.13.1, a Server-Side Request Forgery (SSRF) vulnerability in the Typebot webhook block…CVE-2025-64709 CVE 9.9 Fixed nvd.nist.gov
TypeBot In version 3.9.0 up to but excluding version 3.13.0, an Insecure Direct Object Reference (IDOR) vulnerability…CVE-2025-64706 CVE 7.5 Research disclosed nvd.nist.gov
QuantumCloud ChatBot Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured…CVE-2025-64277 CVE 5.3 Research disclosed nvd.nist.gov
AnthropicClaude Code Claude Code misused in AI-orchestrated cyber espionage campaign (GTG-1002)AIS-2025-015 Incident — Vendor confirmedExploited Exploited anthropic.com
MicrosoftVisual Studio Code Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized…CVE-2025-62453 CVE 5.0 Research disclosed nvd.nist.gov
MicrosoftGithub Copilot Chat Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot…CVE-2025-62449 CVE 6.8 Research disclosed nvd.nist.gov
MicrosoftGithub Copilot Chat Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code…CVE-2025-62222 CVE 8.8 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a…CVE-2025-33202 CVE 6.5 Research disclosed nvd.nist.gov
Milvus An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to…CVE-2025-64513 CVE 9.3 Fixed nvd.nist.gov
Langfuse Starting in version 2.70.0 and prior to versions 2.95.11 and 3.124.1, in certain project membership APIs, the…CVE-2025-64504 CVE 5.0 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE EventsCVE-2025-64496 CVE 7.3 Fixed osv.dev
Open WebUIopen-webui Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in…CVE-2025-64495 CVE 8.7 Fixed osv.dev
Ays Pro AI ChatBot Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and…CVE-2025-62039 CVE 7.5 Research disclosed nvd.nist.gov
Cursor In versions 1.7.23 and below, a logic bug allows a malicious agent to read sensitive files that should be…CVE-2025-64110 CVE 7.5 Fixed nvd.nist.gov
Cursor In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code…CVE-2025-64109 CVE 8.8 Fixed nvd.nist.gov
ApacheDoris MCP Server An attacker with a valid read-only account can bypass Doris MCP Server’s read-only mode due to improper…CVE-2025-58337 CVE 5.4 Fixed nvd.nist.gov
SalesforceAgentforce Vibes Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes…CVE-2025-64321 CVE 5.3 Fixed nvd.nist.gov
SalesforceAgentforce Vibes Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes…CVE-2025-64320 CVE 6.5 Fixed nvd.nist.gov
SalesforceMulesoft Anypoint Code Builder Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code…CVE-2025-64318 CVE 5.3 Fixed nvd.nist.gov
Cursor In versions 1.7.44 and below, various NTFS path quirks allow a prompt injection attacker to circumvent…CVE-2025-64108 CVE 8.8 Fixed nvd.nist.gov
Cursor In versions 1.7.52 and below, manipulating internal settings may lead to RCECVE-2025-64107 CVE 8.8 Fixed nvd.nist.gov
Cursor In versions 1.7.28 and below, an input validation flaw in Cursor's MCP server installation enables specially…CVE-2025-64106 CVE 8.8 Research disclosed nvd.nist.gov
DSPy The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when…CVE-2025-12695 CVE 5.9 Research disclosed nvd.nist.gov
SalesforceMulesoft Anypoint Code Builder Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code…CVE-2025-10875 CVE 6.5 Fixed nvd.nist.gov
n8n n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit HookCVE-2025-62726 CVE 8.8 Fixed osv.dev
JenkinsMCP Server Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP…CVE-2025-64132 CVE 5.4 Research disclosed nvd.nist.gov
MLflow MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution VulnerabilityCVE-2025-11201 CVE 8.1 Fixed github.com
MLflow MLflow Weak Password Requirements Authentication Bypass VulnerabilityCVE-2025-11200 CVE 8.1 Fixed github.com
QuantumCloud ChatBot Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured…CVE-2025-62952 CVE 4.3 Research disclosed nvd.nist.gov
AI Chatbot Free Models The AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant plugin for WordPress is…CVE-2025-11576 CVE 4.3 Research disclosed nvd.nist.gov
LLM Hubspot Blog Import The LLM Hubspot Blog Import plugin for WordPress is vulnerable to unauthorized modification of data due to a…CVE-2025-11257 CVE 4.3 Research disclosed nvd.nist.gov
OpenAIChatGPT Atlas ChatGPT Atlas omnibox treats malformed URLs as trusted agent promptsAIS-2025-014 Incident — Research disclosed neuraltrust.ai
MxChat The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery…CVE-2025-10705 CVE 5.3 Research disclosed nvd.nist.gov
FastGPT Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posing…CVE-2025-62612 CVE 5.3 Fixed nvd.nist.gov
Oct8neChatbot Stored Cross-site Scripting (XSS) in Oct8ne Chatbot v2.3CVE-2025-11952 CVE 6.1 Research disclosed nvd.nist.gov
Hugging FaceSmolagents Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f…CVE-2025-11844 CVE 5.4 Fixed nvd.nist.gov
Other Cross-site Scripting (XSS) stored vulnerability in Tawk Live ChatCVE-2025-8349 CVE 5.3 Research disclosed nvd.nist.gov
Kognetiks Chatbot The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a…CVE-2025-11256 CVE 5.3 Research disclosed nvd.nist.gov
LobeHub@lobehub/chat Lobe Chat vulnerable to Server-Side Request Forgery with native web fetch moduleCVE-2025-62505 CVE 3.0 Fixed github.com
Other A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read…CVE-2025-62356 CVE 7.5 Research disclosed nvd.nist.gov
Other A path traversal vulnerability in all versions of the Windsurf IDE enables a threat actor to read and write…CVE-2025-62353 CVE 9.8 Research disclosed nvd.nist.gov
Dify In Dify versions through 1.9.1, the MCP OAuth component is vulnerable to cross-site scripting when a victim…CVE-2025-58747 CVE 6.1 Research disclosed nvd.nist.gov
Oct8neChatbot Stored Cross-site Scripting (XSS) in Oct8ne Chatbot v2.3CVE-2025-10869 CVE 6.1 Research disclosed nvd.nist.gov
Perfex CRM Stored Cross-Site Scripting (XSS) in Perfex CRM chatbot before 3.3.1 allows attackers to inject arbitrary…CVE-2025-60374 CVE 6.1 Fixed nvd.nist.gov
Windsurft A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 modelCVE-2025-36730 CVE 4.6 Research disclosed nvd.nist.gov
FlowiseAIflowise Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright PackagesCVE-2025-34267 CVE High Fixed github.com
LlamaIndexllama-index llama-index has Insecure Temporary FileCVE-2025-7707 CVE 7.1 Fixed github.com
oobaboogatext-generation-webui In versions through 3.13, a Local File Inclusion vulnerability exists in the character picture upload featureCVE-2025-62364 CVE 6.2 Fixed nvd.nist.gov
FlowiseAIflowise Flowise is vulnerable to arbitrary file exposure through its ReadFileToolGHSA-j44m-5v8f-gc9c GHSA 7.7 Fixed github.com
Cherry AiCherry Studio Cherry Studio registers a custom protocol called `cherrystudio://`CVE-2025-61929 CVE 9.6 Research disclosed nvd.nist.gov
n8n n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on HostCVE-2025-71380 CVE 8.8 Research disclosed osv.dev
Microsoft365 Copilot Chat Improper neutralization of special elements used in a command ('command injection') in Copilot allows an…CVE-2025-59286 CVE 9.3 Research disclosed nvd.nist.gov
Microsoft365 Copilot Chat Improper neutralization of special elements used in a command ('command injection') in Copilot allows an…CVE-2025-59272 CVE 9.3 Research disclosed nvd.nist.gov
Microsoft365 Word Copilot Improper neutralization of special elements used in a command ('command injection') in Copilot allows an…CVE-2025-59252 CVE 9.3 Research disclosed nvd.nist.gov
FlowiseAIflowise Flowise is vulnerable to arbitrary file write through its WriteFileToolCVE-2025-61913 CVE 9.9 Fixed github.com
Framelink Figma MCP Server Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary…CVE-2025-53967 CVE 8.0 Fixed nvd.nist.gov
wonderwhy-erDesktopCommanderMCP A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13CVE-2025-11489 CVE 7.0 Research disclosed nvd.nist.gov
vLLM vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` classCVE-2025-6242 CVE 7.1 Fixed github.com
HiyougaLLaMA-Factory Prior to version 0.9.4, a Server-Side Request Forgery (SSRF) vulnerability in the chat API allows any…CVE-2025-61784 CVE 8.1 Fixed nvd.nist.gov
vLLM vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible ServerCVE-2025-61620 CVE 6.5 Fixed github.com
vLLM vLLM is vulnerable to timing attack at bearer authCVE-2025-59425 CVE 7.5 Fixed github.com
FlowiseAIflowise FlowiseAI/Flosise has File Upload vulnerabilityCVE-2025-61687 CVE 8.8 Fixed github.com
SillyTavern In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing…CVE-2025-59159 CVE 9.6 Fixed nvd.nist.gov
FlowiseAIflowise Flowise vulnerable to RCE via Dynamic function constructor injectionCVE-2025-55346 CVE 9.8 Vendor confirmed github.com
FlowiseAIflowise Flowise vulnerable to XSSCVE-2025-71331 CVE Medium Fixed github.com
Mastra Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to a Directory Traversal attack that results in the…CVE-2025-61685 CVE 6.5 Fixed nvd.nist.gov
Cursor In versions 1.7 and below, a vulnerability in the way Cursor CLI Agent protects its sensitive files (i.e…CVE-2025-61593 CVE 8.8 Fixed nvd.nist.gov
Cursor In versions 1.7 and below, automatic loading of project-specific CLI configuration from the current working…CVE-2025-61592 CVE 8.8 Research disclosed nvd.nist.gov
Cursor In versions 1.7 and below, when MCP uses OAuth authentication with an untrusted MCP server, an attacker can…CVE-2025-61591 CVE 8.8 Research disclosed nvd.nist.gov
Cursor Versions 1.6 and below are vulnerable to Remote Code Execution (RCE) attacks through Visual Studio Code…CVE-2025-61590 CVE 7.5 Fixed nvd.nist.gov
Cursor In versions 1.6 and below, Mermaid (a to render diagrams) allows embedding images which then get rendered by…CVE-2025-61589 CVE 5.9 Fixed nvd.nist.gov
Cursor Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files…CVE-2025-59944 CVE 9.8 Fixed nvd.nist.gov
AnthropicClaude Code Versions below 1.0.120 failed to account for symlinks when checking permission deny rulesCVE-2025-59829 CVE 6.5 Fixed nvd.nist.gov
AnthropicClaude Code Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog…CVE-2025-59536 CVE 8.8 Fixed nvd.nist.gov
FlowiseAIflowise Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panelCVE-2025-50538 CVE 9.3 Fixed github.com
FlowiseAIflowise Flowise Stored XSS vulnerability through logs in chatbotCVE-2025-29192 CVE 5.3 Fixed github.com
LangBot In versions 4.1.0 up to but not including 4.3.5, authorized attackers can exploit the /api/v1/files/documents…CVE-2025-59835 CVE 8.6 Fixed nvd.nist.gov
SSE Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header…CVE-2025-59163 CVE 2.1 Fixed nvd.nist.gov
LlamaIndexllama-index-core llama-index-core insecurely handles temporary filesCVE-2025-7647 CVE 7.3 Fixed github.com
SrmoreteADB MCP Server In versions 0.1.0 and prior, the MCP Server is written in a way that is vulnerable to command injection…CVE-2025-59834 CVE 9.8 Fixed nvd.nist.gov
Dify In version 1.8.1, a broken access control vulnerability on the /console/api/apps/<APP_ID>c…CVE-2025-59422 CVE 3.1 Fixed nvd.nist.gov
SalesforceAgentforce ForcedLeak: Web-to-Lead prompt injection exfiltrates Agentforce CRM dataAIS-2025-013 Incident — Fixed noma.security
AnthropicClaude Code Prior to Claude Code version 1.0.39, when using Claude Code with Yarn versions 2.0+, Yarn plugins are…CVE-2025-59828 CVE 9.8 Fixed nvd.nist.gov
LobeHub@lobehub/chat lobe-chat has an Open RedirectCVE-2025-59426 CVE 4.3 Fixed github.com
Hugging Facetransformers Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay…CVE-2025-6921 CVE 5.3 Fixed github.com
FlowiseAIflowise Prior to August 2025 Cloud-Hosted Flowise, an authenticated vulnerability in Flowise Cloud allows any user on…CVE-2025-59434 CVE 9.6 Fixed nvd.nist.gov
LiquidlabsMagicai MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability within the chatbot…CVE-2025-57203 CVE 4.8 Research disclosed nvd.nist.gov
LobeHub@lobehub/chat Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat MessagesCVE-2025-59417 CVE 6.1 Fixed github.com
OpenAIChatGPT Deep Research ShadowLeak zero-click service-side exfiltration via ChatGPT Deep ResearchAIS-2025-012 Incident — Alleged radware.com
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause a…CVE-2025-23336 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause…CVE-2025-23329 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause…CVE-2025-23328 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an…CVE-2025-23316 CVE 9.8 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an…CVE-2025-23268 CVE 9.8 Research disclosed nvd.nist.gov
Other A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13CVE-2025-10619 CVE 6.3 Research disclosed nvd.nist.gov
FlowiseAIflowise Flowise has unsandboxed remote code execution via Custom MCPCVE-2025-71336 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise has arbitrary file access due to missing chat flow id validationCVE-2025-71334 CVE 9.8 Fixed github.com
FlowiseAIflowise Flowise has an Arbitrary File ReadCVE-2025-71324 CVE 9.1 Fixed github.com
FlowiseAIflowise FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerabilityCVE-2025-59527 CVE 7.5 Fixed nvd.nist.gov
Other From 1.4.0 to before 1.5.0, hackmd-mcp contains a server-side request forgery (SSRF) vulnerability when the…CVE-2025-59155 CVE 6.9 Fixed nvd.nist.gov
n8n Stored XSS in n8n LangChain Chat Trigger Node via initialMessages ParameterCVE-2025-58177 CVE 4.1 Fixed osv.dev
FlowiseAIflowise FlowiseAI Pre-Auth Arbitrary Code ExecutionCVE-2025-57164 CVE 9.1 Fixed osv.dev
Hugging Facetransformers Hugging Face Transformers library has Regular Expression Denial of ServiceCVE-2025-6051 CVE 5.3 Fixed github.com
FlowiseAIFlowise Flowise CustomMCP node remote code execution via Function() constructorAIS-2025-011 Incident 10.0 FixedExploited Exploited github.com
Hugging Facetransformers Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizerCVE-2025-6638 CVE 5.3 Fixed github.com
FlowiseAIflowise Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to…CVE-2025-58434 CVE 9.8 Fixed nvd.nist.gov
MicrosoftVisual Studio Code Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code…CVE-2025-55319 CVE 9.8 Research disclosed nvd.nist.gov
Neo4j Cypher MCP DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy…CVE-2025-10193 CVE 7.4 Research disclosed nvd.nist.gov
AnthropicClaude Code At startup, Claude Code executed a command templated in with `git config user.email`CVE-2025-59041 CVE 9.8 Fixed nvd.nist.gov
AnthropicClaude Code Due to an error in command parsing, versions prior to 1.0.105 were vulnerable to a bypass of the Claude Code…CVE-2025-58764 CVE 9.8 Fixed nvd.nist.gov
Other An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute…CVE-2025-56406 CVE 7.5 Research disclosed nvd.nist.gov
QuantumcloudWpbot The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings…CVE-2025-9111 CVE 3.5 Fixed nvd.nist.gov
Other A cross-site scripting issue was reported in versions of the MCP Inspector local development tool prior to…CVE-2025-58444 CVE 8.6 Fixed nvd.nist.gov
Other Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection…CVE-2025-54994 CVE 9.3 Fixed nvd.nist.gov
Obsidian GitHub Copilot Plugin Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext formCVE-2025-58401 CVE 6.8 Fixed nvd.nist.gov
RoocodeRoo Code Versions 3.25.23 and below contain a vulnerability where certain VS Code workspace configuration files…CVE-2025-58372 CVE 9.8 Fixed nvd.nist.gov
Promptcraft Forge Studio All versions contain an non-exhaustive URL scheme check that does not protect against XSSCVE-2025-58361 CVE 9.3 Research disclosed nvd.nist.gov
Markdownify Versions below 0.0.2 contain a command injection vulnerability, caused by the unsanitized use of input…CVE-2025-58358 CVE 7.5 Fixed nvd.nist.gov
5ire Version 0.13.2 contains a vulnerability in the chat page's script gadgets that enables content injection…CVE-2025-58357 CVE 9.6 Fixed nvd.nist.gov
Promptcraft Forge Studio All versions of Promptcraft Forge Studio sanitize user input using regex blacklists such as…CVE-2025-58353 CVE 8.2 Research disclosed nvd.nist.gov
Other Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution…CVE-2025-9959 CVE 7.6 Research disclosed nvd.nist.gov
OpenagentplatformDive In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a…CVE-2025-58176 CVE 8.8 Fixed nvd.nist.gov
Other Prior to version 0.1.12, when users on a Windows platform connect to an attacker controlled MCP server…CVE-2025-58062 CVE 7.3 Fixed nvd.nist.gov
NxNx build system npm packages Nx s1ngularity malicious npm releases abused local AI CLIs to inventory secretsAIS-2025-010 Incident — FixedExploited Exploited github.com
Firecrawl Firecrawl turns entire websites into LLM-ready markdown or structured dataCVE-2025-57818 CVE 6.3 Fixed nvd.nist.gov
LlamaIndexllama-index-core LlamaIndex affected by a Denial of Service (DOS) in JSONReaderCVE-2025-5302 CVE 8.6 Fixed github.com
Langflow Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)CVE-2025-57760 CVE 8.8 Fixed github.com
vLLM vLLM has remote code execution vulnerability in the tool call parser for Qwen3-CoderCVE-2025-9141 CVE 8.8 Fixed github.com
vLLM vllm API endpoints vulnerable to Denial of Service AttacksCVE-2025-48956 CVE 7.5 Fixed github.com
n8n n8n symlink traversal vulnerability in "Read/Write File" node allows access to restricted filesCVE-2025-57749 CVE 6.5 Fixed osv.dev
PerplexityComet browser Indirect prompt injection in Perplexity Comet page summarizationAIS-2025-009 Incident — Vendor confirmed brave.com
n8n Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/sourceCVE-2025-52478 CVE 8.7 Fixed osv.dev
AnthropicClaude Code Prior to version 1.0.4, it's possible to bypass the Claude Code confirmation prompts to read a file and then…CVE-2025-55284 CVE 7.5 Fixed nvd.nist.gov
FlowiseAIflowise Flowise OS command remote code executionCVE-2025-8943 CVE 9.8 Fixed nvd.nist.gov
Cherry AiCherry Studio In version 1.5.1, a remote code execution (RCE) vulnerability exists in the Cherry Studio platform when…CVE-2025-54382 CVE 8.8 Fixed nvd.nist.gov
Cherry AiCherry Studio From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a…CVE-2025-54074 CVE 9.8 Fixed nvd.nist.gov
MicrosoftVisual Studio 2022 Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and…CVE-2025-53773 CVE 7.8 Research disclosed nvd.nist.gov
Zed Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution…CVE-2025-55012 CVE 8.5 Fixed nvd.nist.gov
Cherry AiCherry Studio From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL…CVE-2025-54063 CVE 9.6 Fixed nvd.nist.gov
CodefuseModelCache ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the…CVE-2025-45146 CVE 9.8 Research disclosed nvd.nist.gov
Microsoft365 Copilot Chat Microsoft 365 Copilot BizChat Information Disclosure VulnerabilityCVE-2025-53787 CVE 7.5 Research disclosed nvd.nist.gov
Microsoft365 Copilot Chat Microsoft 365 Copilot BizChat Information Disclosure VulnerabilityCVE-2025-53774 CVE 7.5 Research disclosed nvd.nist.gov
Ollamagithub.com/ollama/ollama Ollama allows deletion of arbitrary filesCVE-2025-44779 CVE 6.6 Fixed github.com
Agno A vulnerability, which was classified as critical, has been found in agno-agi agno up to 1.7.5CVE-2025-8665 CVE 6.3 Research disclosed nvd.nist.gov
Hugging Facetransformers Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerabilityCVE-2025-5197 CVE 5.3 Fixed github.com
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where…CVE-2025-23335 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an…CVE-2025-23334 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an…CVE-2025-23333 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a…CVE-2025-23331 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause…CVE-2025-23327 CVE 9.1 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause…CVE-2025-23326 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause…CVE-2025-23325 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an…CVE-2025-23324 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an…CVE-2025-23323 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could…CVE-2025-23322 CVE 7.5 Fixed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a…CVE-2025-23321 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an…CVE-2025-23320 CVE 7.5 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an…CVE-2025-23319 CVE 9.8 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an…CVE-2025-23318 CVE 9.8 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a…CVE-2025-23317 CVE 9.8 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow…CVE-2025-23311 CVE 9.8 Research disclosed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause…CVE-2025-23310 CVE 9.8 Research disclosed nvd.nist.gov
AnthropicClaude Code In versions below 1.0.20, an error in command parsing makes it possible to bypass the Claude Code…CVE-2025-54795 CVE 9.8 Fixed nvd.nist.gov
AnthropicClaude Code In versions below 0.2.111, a path validation flaw using prefix matching instead of canonical path comparison…CVE-2025-54794 CVE 9.1 Fixed nvd.nist.gov
Cursor Cursor allows writing in-workspace files with no user approval in versions less than 1.3.9CVE-2025-54130 CVE 9.8 Fixed nvd.nist.gov
Cursor In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an…CVE-2025-54136 CVE 8.8 Fixed nvd.nist.gov
Cursor CurXecute: prompt injection writes MCP config for code execution in CursorAIS-2025-008 Incident 9.8 Fixed github.com
Fit2cloud1Panel In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints…CVE-2025-54424 CVE 9.8 Fixed nvd.nist.gov
Cursor In versions below 1.3, Mermaid (which is used to render diagrams) allows embedding images which then get…CVE-2025-54132 CVE 7.5 Fixed nvd.nist.gov
Cursor In versions below 1.3, an attacker can bypass the allow list in auto-run mode with a backtick (`) or $(cmd)CVE-2025-54131 CVE 8.8 Fixed nvd.nist.gov
LangChain langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the GmailToolkit…CVE-2025-46059 CVE 9.8 Research disclosed nvd.nist.gov
AmazonAmazon Q Developer extension for VS Code Malicious code shipped in Amazon Q Developer VS Code extension 1.84.0AIS-2025-007 Incident — FixedExploited Exploited aws.amazon.com
Deepfiction AI Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru June 3, 2025…CVE-2025-51867 CVE 6.5 Research disclosed nvd.nist.gov
URL Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 is vulnerable to Insecure…CVE-2025-51865 CVE 8.8 Research disclosed nvd.nist.gov
AIBOX LLM A reflected cross-site scripting (XSS) vulnerability exists in AIBOX LLM chat (chat.aibox365.cn) through…CVE-2025-51864 CVE 6.5 Research disclosed nvd.nist.gov
TelegAI Stored Cross-Site Scripting (XSS) in TelegAI (telegai.com) 2025-05-26 in its chat component and character…CVE-2025-51860 CVE 6.1 Research disclosed nvd.nist.gov
Chaindesk Stored Cross-Site Scripting (XSS) vulnerability in Chaindesk thru 2025-05-26 in its agent chat componentCVE-2025-51859 CVE 6.5 Research disclosed nvd.nist.gov
Ollama Ollama model pull leaks registry auth tokens via untrusted realm headerAIS-2025-006 Incident 6.9 Fixed gecko.security
Lara Translate MCP Server Versions 0.0.11 and below contain a command injection vulnerability which exists in the @translated/lara-mcp…CVE-2025-53832 CVE 7.5 Fixed nvd.nist.gov
ReplitReplit Agent Replit Agent deletes SaaStr production database during code freezeAIS-2025-005 Incident — Vendor confirmed saastr.com
Other A command injection vulnerability exists in the `mcp-package-docs` MCP Server prior to the fix in commit…CVE-2025-54073 CVE 7.5 Fixed nvd.nist.gov
GitHubGitHub Kanban MCP Server Version 0.3.0 of the MCP Server is written in a way that is vulnerable to command injection vulnerability…CVE-2025-53818 CVE 8.9 Research disclosed nvd.nist.gov
Hugging Facetransformers Transformers is vulnerable to ReDoS attack through its DonutProcessor classCVE-2025-3933 CVE 5.3 Fixed github.com
LlamaIndexllama-index LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader classCVE-2025-6211 CVE 6.5 Fixed github.com
Other Integer Overflow in the gguf_init_from_file_impl function in ggml/src/gguf.cpp can lead to Heap Out-of-Bounds…CVE-2025-53630 CVE 8.9 Fixed nvd.nist.gov
Other mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input…CVE-2025-6514 CVE 9.6 Research disclosed nvd.nist.gov
Other Prior to 1.3.0, a command injection vulnerability exists in the node-code-sandbox-mcp MCP ServerCVE-2025-53372 CVE 7.5 Fixed nvd.nist.gov
MCP Server Kubernetes A command injection vulnerability exists in the mcp-server-kubernetes MCP ServerCVE-2025-53355 CVE 7.5 Fixed nvd.nist.gov
SupabaseSupabase MCP server Supabase MCP prompt injection exposes SQL tables via support ticketAIS-2025-004 Incident — Research disclosed generalanalysis.com
LlamaIndexllama-index A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version…CVE-2025-6210 CVE 6.2 Fixed osv.dev
LlamaIndexllama-index-core LlamaIndex vulnerable to Path Traversal attack through its encode_image functionCVE-2025-6209 CVE 7.5 Fixed github.com
LlamaIndexllama-index-core LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsingCVE-2025-5472 CVE 6.5 Fixed github.com
Hugging Facetransformers Transformers's Improper Input Validation vulnerability can be exploited through username injectionCVE-2025-3777 CVE 3.5 Fixed github.com
Hugging Facetransformers Transformers vulnerable to ReDoS attack through its get_imports() functionCVE-2025-3264 CVE 5.3 Fixed github.com
Hugging Facetransformers Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtrackingCVE-2025-3263 CVE 5.3 Fixed github.com
Hugging Facetransformers Transformers vulnerable to ReDoS attack through its SETTING_RE variableCVE-2025-3262 CVE 5.3 Fixed github.com
LlamaIndexllama-index An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser…CVE-2025-3225 CVE 7.5 Fixed osv.dev
LlamaIndexllama-index A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to…CVE-2025-3046 CVE 7.5 Fixed osv.dev
LlamaIndexllama-index A vulnerability in the ArxivReader class of the run-llama/llama_index repository, versions up to…CVE-2025-3044 CVE 5.3 Fixed osv.dev
LlamaIndexllama-index-core LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer componentCVE-2025-3108 CVE 5.0 Fixed github.com
Model Context Protocolmcp MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoSCVE-2025-53366 CVE 8.7 Fixed github.com
Model Context Protocolmcp MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of ServiceCVE-2025-53365 CVE 8.7 Fixed github.com
Chatra Chatra Live Chat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chatra…CVE-2025-24735 CVE 7.7 Research disclosed nvd.nist.gov
n8n n8n is vulnerable to Improper Authorization through its `/stop` endpointCVE-2025-52554 CVE 4.3 Fixed osv.dev
n8n n8n Vulnerable to Denial of Service via Malformed Binary Data RequestsCVE-2025-49595 CVE 4.9 Fixed osv.dev
Model Context Protocol Servers Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files in cases where the…CVE-2025-53110 CVE 7.3 Fixed nvd.nist.gov
Model Context Protocol Servers Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within…CVE-2025-53109 CVE 7.3 Fixed nvd.nist.gov
Anthropic A data exfiltration vulnerability exists in Anthropic’s deprecated Slack Model Context Protocol (MCP) Server…CVE-2025-34072 CVE 9.3 Research disclosed nvd.nist.gov
Other Prior to version 2.1.5, there is a command injection vulnerability caused by the unsanitized use of input…CVE-2025-53107 CVE 7.5 Fixed nvd.nist.gov
Other Prior to version 0.2.2, the MCP server is written in a way that is vulnerable to command injection attacks as…CVE-2025-53100 CVE 8.6 Fixed nvd.nist.gov
QuantumCloud ChatBot Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured…CVE-2025-53200 CVE 4.3 Research disclosed nvd.nist.gov
RoocodeRoo Code The project-specific MCP configuration for the Roo Code agent is stored in the `.roo/mcp.json` file within…CVE-2025-53098 CVE 8.1 Fixed nvd.nist.gov
RoocodeRoo Code Prior to version 3.20.3, there was an issue where the Roo Code agent's `search_files` tool did not respect…CVE-2025-53097 CVE 7.5 Fixed nvd.nist.gov
n8n n8n allows open redirects via the /signin endpointCVE-2025-49592 CVE 4.6 Fixed osv.dev
HiyougaLLaMA-Factory A remote code execution vulnerability was discovered in LLaMA-Factory versions up to and including 0.9.3…CVE-2025-53002 CVE 9.8 Research disclosed nvd.nist.gov
Other Versions prior to 1.3.3 are written in a way that is vulnerable to command injection vulnerability attacks as…CVE-2025-52573 CVE 6.0 Fixed nvd.nist.gov
CoderevolutionAiomatic The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for…CVE-2025-6206 CVE 7.5 Research disclosed nvd.nist.gov
Claude Code Claude Code extensions in VSCode and forks (e.g., Cursor, Windsurf, and VSCodium) and JetBrains IDEs (e.g…CVE-2025-52882 CVE 8.8 Fixed nvd.nist.gov
Ggmlllama.cpp Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's tokenizer…CVE-2025-52566 CVE 8.8 Fixed nvd.nist.gov
MLflow MLFlow SSRF via gateway_proxy_handlerCVE-2025-52967 CVE 5.8 Fixed github.com
FastGPT Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable to open redirect and DOM-based…CVE-2025-52552 CVE 6.1 Fixed nvd.nist.gov
Other Prior to commit 8eb3567, the pgai repository was vulnerable to an attack allowing the exfiltration of all…CVE-2025-52467 CVE 9.1 Fixed nvd.nist.gov
Ggmlllama.cpp Prior to version b5662, an attacker‐supplied GGUF model vocabulary can trigger a buffer overflow in…CVE-2025-49847 CVE 8.8 Fixed nvd.nist.gov
Dify In version 1.2.0, there is insufficient filtering of user input by web applicationsCVE-2025-49149 CVE 6.1 Research disclosed nvd.nist.gov
Other Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication…CVE-2025-49596 CVE 9.4 Fixed nvd.nist.gov
Cursor Prior to 0.51.0, by default, the setting json.schemaDownload.enable was set to TrueCVE-2025-49150 CVE 5.9 Fixed nvd.nist.gov
MicrosoftMicrosoft 365 Copilot EchoLeak zero-click data exfiltration via crafted emailAIS-2025-003 Incident 7.5 Fixed api.msrc.microsoft.com
LlamaIndexllama-index llama_index vulnerable to SQL InjectionCVE-2025-1793 CVE 9.8 Fixed github.com
AstrBot A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure…CVE-2025-48957 CVE 7.5 Fixed nvd.nist.gov
LlamaIndexllama-index An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index…CVE-2025-1750 CVE 9.8 Fixed osv.dev
Dot The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input…CVE-2024-57783 CVE 8.1 Research disclosed nvd.nist.gov
Project AI Prior to the pre-beta version, a hardcoded API key was present in the source codeCVE-2025-48491 CVE 2.7 Fixed nvd.nist.gov
Gradio Gradio CORS Origin Validation Bypass VulnerabilityCVE-2025-5320 CVE 3.7 Vendor confirmed github.com
Gradio Gradio Allows Unauthorized File Copy via Path ManipulationCVE-2025-48889 CVE 5.3 Fixed github.com
vLLM vLLM vulnerable to Regular Expression Denial of ServiceCVE-2025-71379 CVE 4.3 Fixed github.com
Other aws-mcp-server MCP server is vulnerable to command injectionCVE-2025-5277 CVE 9.6 Research disclosed nvd.nist.gov
vLLM vLLM Tool Schema allows DoS via Malformed pattern and type FieldsCVE-2025-48944 CVE 6.5 Fixed github.com
vLLM vLLM allows clients to crash the openai server with invalid regexCVE-2025-48943 CVE 6.5 Fixed github.com
vLLM vLLM DOS: Remotely kill vllm over http with invalid JSON schemaCVE-2025-48942 CVE 6.5 Fixed github.com
vLLM vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in…CVE-2025-48887 CVE 6.5 Fixed github.com
vLLM vLLM has a Weakness in MultiModalHasher Image Hashing ImplementationCVE-2025-46722 CVE 7.3 Fixed github.com
vLLM Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix CachingCVE-2025-46570 CVE 2.6 Fixed github.com
LlamaIndexllama-index LLama-Index CLI version v0.12.20 contains an OS command injection vulnerabilityCVE-2025-1753 CVE 7.8 Research disclosed osv.dev
GitHubGitHub MCP server GitHub MCP prompt injection via public issue leaks private repository dataAIS-2025-002 Incident — Research disclosed invariantlabs.ai
vLLM vLLM Allows Remote Code Execution via PyNcclPipe Communication ServiceCVE-2025-47277 CVE 9.8 Fixed github.com
Langroid Prior to version 0.53.15, `LanceDocChatAgent` uses pandas eval() through `compute_from_docs()`CVE-2025-46725 CVE 9.8 Fixed nvd.nist.gov
Langroid Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`CVE-2025-46724 CVE 9.8 Fixed nvd.nist.gov
QuantumCloud WPBot Pro Wordpress Chatbot Deserialization of Untrusted Data vulnerability in QuantumCloud WPBot Pro Wordpress Chatbot allows Object…CVE-2025-47582 CVE 9.8 Research disclosed nvd.nist.gov
Hugging Facetransformers Hugging Face Transformers Regular Expression Denial of ServiceCVE-2025-2099 CVE 5.3 Fixed github.com
WPBot Pro Wordpress Chatbot The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file deletion due to…CVE-2025-3812 CVE 8.1 Research disclosed nvd.nist.gov
Ollamagithub.com/ollama/ollama Ollama Server Vulnerable to Denial of Service (DoS) AttackCVE-2025-1975 CVE 7.5 Vendor confirmed github.com
QuantumcloudWpbot The AI ChatBot for WordPress WordPress plugin before 6.2.4 does not sanitise and escape some of its settings…CVE-2025-0329 CVE 4.8 Fixed nvd.nist.gov
5ire Versions prior to 0.11.1 are vulnerable to stored cross-site scripting in chatbot responses due to…CVE-2025-47777 CVE 9.6 Fixed nvd.nist.gov
ToolHive Due to the ordering of code used to start an MCP server container, versions of ToolHive prior to 0.0.33…CVE-2025-47274 CVE 2.4 Fixed nvd.nist.gov
LlamaIndexllama-index LlamaIndex Vulnerable to Denial of Service (DoS)CVE-2025-1752 CVE 7.5 Fixed github.com
vLLM Remote Code Execution Vulnerability in vLLM Multi-Node Cluster ConfigurationCVE-2025-30165 CVE 8.0 Fixed github.com
Langroid Prior to version 0.53.4, a LLM application leveraging `XMLToolMessage` class may be exposed to untrusted XML…CVE-2025-46726 CVE 9.1 Fixed nvd.nist.gov
HiyougaLLama Factory LLama Factory enables fine-tuning of large language modelsCVE-2025-46567 CVE 7.8 Fixed nvd.nist.gov
vLLM vLLM: Quadratic Time Complexity in Input Token Processing​ leads to denial of serviceCVE-2025-46560 CVE 7.5 Fixed github.com
vLLM vLLM Vulnerable to Remote Code Execution via Mooncake IntegrationCVE-2025-32444 CVE 9.8 Fixed github.com
vLLM Data exposure via ZeroMQ on multi-node vLLM deploymentCVE-2025-30202 CVE 7.5 Fixed github.com
Hugging Facetransformers Transformers Regular Expression Denial of Service (ReDoS) vulnerabilityCVE-2025-1194 CVE 4.3 Fixed github.com
n8n n8n Vulnerable to Stored XSS through Attachments View EndpointCVE-2025-46343 CVE 5.0 Fixed osv.dev
Dify Prior to version 1.3.0, a clickjacking vulnerability was found in the default setup of the DIFY application…CVE-2025-43854 CVE 6.1 Fixed nvd.nist.gov
Dify Prior to version 0.6.12, a normal user is able to access and modify APP orchestration, even though the web UI…CVE-2025-43862 CVE 7.6 Fixed nvd.nist.gov
vLLM CVE-2025-24357 Malicious model remote code execution fix bypass with PyTorch < 2.6.0GHSA-ggpf-24jw-3fcw GHSA 9.8 Fixed github.com
Dify Prior to version 0.6.12, a vulnerability was identified in the DIFY where normal users can enable or disable…CVE-2025-32796 CVE 6.5 Fixed nvd.nist.gov
Dify Prior to version 0.6.12, a vulnerability was identified in the DIFY where normal users are improperly granted…CVE-2025-32795 CVE 6.5 Fixed nvd.nist.gov
Dify In versions 0.6.8 and prior, a vulnerability was identified in the DIFY AI where normal users are improperly…CVE-2025-32790 CVE 4.3 Fixed nvd.nist.gov
Rasa Pro A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement…CVE-2025-32377 CVE 6.5 Fixed nvd.nist.gov
MattermostMattermost Server Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.9 fail to restrict domains the LLM can…CVE-2025-31363 CVE 6.5 Research disclosed nvd.nist.gov
vLLM vLLM vulnerable to Denial of Service by abusing xgrammar cacheGHSA-hf3c-wxg2-49q9 GHSA 6.5 Fixed github.com
Other In versions prior to Aidex 1.7, an authenticated malicious user, taking advantage of an open registry, could…CVE-2025-3579 CVE 9.3 Fixed nvd.nist.gov
Aidex A malicious, authenticated user in Aidex, versions prior to 1.7, could list credentials of other users…CVE-2025-3578 CVE 9.3 Fixed nvd.nist.gov
Other In versions before 5.5.0, an attacker with access to the `/backup/import` API endpoint can write arbitrary…CVE-2025-32779 CVE 6.5 Fixed nvd.nist.gov
OracleFinancial Services Revenue Management and Billing Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial…CVE-2025-21573 CVE 6.0 Research disclosed nvd.nist.gov
MaxKB A reverse shell vulnerability exists in the module of function libraryCVE-2025-32383 CVE 7.2 Fixed nvd.nist.gov
Mlc AiXGrammar Prior to 0.1.18, Xgrammar includes a cache for compiled grammars to increase performance with repeated use of…CVE-2025-32381 CVE 6.5 Fixed nvd.nist.gov
FlowiseAIflowise FlowiseDB vulnerable to SQL Injection by authenticated usersCVE-2025-71332 CVE 5.9 Research disclosed osv.dev
Langflow Langflow unauthenticated RCE via /api/v1/validate/code, exploited in wildAIS-2025-001 Incident 9.8 FixedExploited Exploited horizon3.ai
MozillaFirefox By first using the AI chatbot in one tab and later activating it in another tab, the document title of the…CVE-2025-3035 CVE 5.3 Fixed nvd.nist.gov
Mesop A class pollution vulnerability in Mesop prior to version 0.14.1 allows attackers to overwrite global…CVE-2025-30358 CVE 8.1 Fixed nvd.nist.gov
Open WebUIopen-webui Open WebUI has vulnerable dependency on starlette via fastapiGHSA-w466-2wfc-8g58 GHSA 7.5 Fixed osv.dev
Open WebUIopen-webui Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability in api/chat/fileGHSA-6wj5-5pgr-jwq8 GHSA 7.5 Fixed osv.dev
Open WebUIopen-webui Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) VulnerabilityGHSA-5ccf-884p-4jjq GHSA 7.5 Research disclosed osv.dev
MLflow MLflow has Weak Password RequirementsCVE-2025-1474 CVE 3.8 Fixed github.com
MLflow MLflow Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2025-1473 CVE 5.4 Fixed github.com
LiteLLM LiteLLM Has an Improper Authorization VulnerabilityCVE-2025-0628 CVE 8.1 Fixed github.com
MLflow MLflow Uncontrolled Resource Consumption vulnerabilityCVE-2025-0453 CVE 5.9 Vendor confirmed github.com
LiteLLM LiteLLM Has a Leakage of Langfuse API KeysCVE-2025-0330 CVE 7.5 Vendor confirmed github.com
Ollamagithub.com/ollama/ollama Ollama Divide By Zero vulnerabilityCVE-2025-0317 CVE 7.5 Vendor confirmed github.com
Ollamagithub.com/ollama/ollama Ollama Allocation of Resources Without Limits or Throttling vulnerabilityCVE-2025-0315 CVE 7.5 Vendor confirmed github.com
Ollamagithub.com/ollama/ollama Ollama Denial of Service (DoS) via Null Pointer DereferenceCVE-2025-0312 CVE 7.5 Vendor confirmed github.com
LiteLLM LiteLLM Reveals Portion of API Key via a Logging FileCVE-2024-9606 CVE 7.5 Fixed github.com
vLLM vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypointsCVE-2024-9053 CVE 9.8 Vendor confirmed github.com
vLLM vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_objectCVE-2024-9052 CVE 9.8 Vendor confirmed github.com
LiteLLM LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP RequestCVE-2024-8984 CVE 7.5 Fixed github.com
Gradio Gradio DOS in multipart boundry while uploading the fileCVE-2024-8966 CVE 7.5 Vendor confirmed github.com
MLflow MLflow has a Local File Read/Path Traversal in dbfsCVE-2024-8859 CVE 7.5 Fixed github.com
Ollamagithub.com/ollama/ollama Ollama Divide by Zero VulnerabilityCVE-2024-8063 CVE 7.5 Vendor confirmed github.com
Open WebUIopen-webui Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptionsCVE-2024-8060 CVE 8.1 Fixed osv.dev
Open WebUIopen-webui Open WebUI lacks authentication for the `api/v1/utils/pdf` endpointCVE-2024-8053 CVE 7.5 Fixed osv.dev
Gradio Gradio Vulnerable to Open RedirectCVE-2024-8021 CVE 5.4 Vendor confirmed github.com
Open WebUIopen-webui Open WebUI stored cross-site scripting (XSS) vulnerabilityCVE-2024-7990 CVE 8.4 Research disclosed osv.dev
Open WebUIopen-webui Open WebUI denial of service through endpoint for converting markdownCVE-2024-7983 CVE 7.5 Fixed osv.dev
Open WebUIopen-webui Open WebUI Cross-Site Request Forgery (CSRF) VulnerabilityCVE-2024-7806 CVE 8.0 Fixed osv.dev
Other Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection against injecting additional…CVE-2024-7764 CVE 8.1 Research disclosed nvd.nist.gov
Open WebUIopen-webui Open WebUI Vulnerable to a Session Fixation AttackCVE-2024-7053 CVE 7.6 Research disclosed osv.dev
Open WebUIopen-webui Open WebUI Allows Viewing of Admin DetailsCVE-2024-7046 CVE 4.3 Research disclosed osv.dev
Open WebUIopen-webui Open WebUI Has Improper Access Control Leading to Arbitrary Prompt ReadCVE-2024-7045 CVE 4.3 Research disclosed osv.dev
Open WebUIopen-webui Open WebUI Vulnerable to Cross-Site Scripting (XSS) via Chat File UploadCVE-2024-7044 CVE 6.8 Fixed osv.dev
Open WebUIopen-webui Open WebUI Allows Arbitrary File Reading and DeletionCVE-2024-7043 CVE 8.1 Fixed osv.dev
Open WebUIopen-webui Open WebUI Uncontrolled Resource Consumption vulnerabilityCVE-2024-7036 CVE 7.5 Research disclosed osv.dev
Open WebUIopen-webui Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)CVE-2024-7035 CVE 6.9 Fixed osv.dev
MLflow MLflow Uncontrolled Resource Consumption vulnerabilityCVE-2024-6838 CVE 5.3 Vendor confirmed github.com
LiteLLM LiteLLM Vulnerable to Remote Code Execution (RCE)CVE-2024-6825 CVE 8.8 Vendor confirmed github.com
LlamaIndexllama-index LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure PermissionsCVE-2024-12911 CVE 7.1 Fixed github.com
LlamaIndexllama-index LlamaIndex Uncontrolled Resource Consumption vulnerabilityCVE-2024-12910 CVE 5.9 Fixed github.com
Ollamagithub.com/ollama/ollama Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIPCVE-2024-12886 CVE 7.5 Fixed github.com
Hugging Facetransformers Transformers Regular Expression Denial of Service (ReDoS) vulnerabilityCVE-2024-12720 CVE 5.3 Fixed github.com
LlamaIndexllama-index-core LlamaIndex Improper Handling of Exceptional Conditions vulnerabilityCVE-2024-12704 CVE 7.5 Fixed github.com
Open WebUIopen-webui Open WebUI Uncontrolled Resource Consumption vulnerabilityCVE-2024-12537 CVE 7.5 Research disclosed osv.dev
Open WebUIopen-webui Open WebUI Uncontrolled Resource Consumption vulnerabilityCVE-2024-12534 CVE 7.5 Research disclosed osv.dev
Gradio Gradio Path Traversal vulnerabilityCVE-2024-12217 CVE 5.3 Vendor confirmed github.com
Ollamagithub.com/ollama/ollama Ollama Allows Out-of-Bounds ReadCVE-2024-12055 CVE 7.5 Vendor confirmed github.com
Dify A stored cross-site scripting (XSS) vulnerability exists in the latest version of langgenius/difyCVE-2024-11850 CVE 5.4 Research disclosed nvd.nist.gov
Dify A privilege escalation vulnerability exists in langgenius/dify version 0.9.1CVE-2024-11821 CVE 4.3 Research disclosed nvd.nist.gov
vLLM vLLM Deserialization of Untrusted Data vulnerabilityCVE-2024-11041 CVE 9.8 Vendor confirmed github.com
Binary Huskygpt_academic In binary-husky/gpt_academic version <= 3.83, the plugin `CodeInterpreter` is vulnerable to code injection…CVE-2024-10950 CVE 8.8 Research disclosed nvd.nist.gov
LangChainlangchain-core langchain-core allows unauthorized users to read arbitrary files from the host file systemCVE-2024-10940 CVE 5.3 Fixed github.com
Gradio Gradio Vulnerable to Arbitrary File DeletionCVE-2024-10648 CVE 8.2 Vendor confirmed github.com
Gradio Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP RequestCVE-2024-10624 CVE 7.5 Vendor confirmed github.com
Gradio Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip BombCVE-2024-10569 CVE 7.5 Vendor confirmed github.com
LiteLLM LiteLLM Vulnerable to Denial of Service (DoS)CVE-2024-10188 CVE 7.5 Fixed github.com
vLLM vLLM Allows Remote Code Execution via Mooncake IntegrationCVE-2025-29783 CVE 9.0 Fixed github.com
vLLM vLLM denial of service via outlines unbounded cache on diskCVE-2025-29770 CVE 6.5 Fixed github.com
FlowiseAIflowise Flowise allows arbitrary file write to RCECVE-2025-71338 CVE 10.0 Research disclosed osv.dev
FlowiseAIflowise Flowise Pre-auth Arbitrary File UploadCVE-2025-71333 CVE Critical Research disclosed osv.dev
MljarPlotAI A vulnerability, that could result in Remote Code Execution (RCE), has been found in PlotAICVE-2025-1497 CVE 9.8 Research disclosed nvd.nist.gov
CoderevolutionAiomatic The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for…CVE-2024-13882 CVE 8.8 Research disclosed nvd.nist.gov
CoderevolutionAiomatic The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for…CVE-2024-13816 CVE 5.4 Fixed nvd.nist.gov
FastGPT Since the web crawling plug-in does not perform intranet IP verification, an attacker can initiate an…CVE-2025-27600 CVE 6.5 Fixed nvd.nist.gov
Anyscaleray ray vulnerable to Insertion of Sensitive Information into Log FileCVE-2025-1979 CVE 6.4 Fixed github.com
FlowiseAIflowise FlowiseAI Flowise arbitrary file upload vulnerabilityCVE-2025-26319 CVE High Research disclosed osv.dev
Binary HuskyGPT Academic In 3.91 and earlier, GPT Academic does not properly account for soft linksCVE-2025-25185 CVE 7.5 Research disclosed nvd.nist.gov
PHP Program Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')…CVE-2025-26932 CVE 7.5 Research disclosed nvd.nist.gov
GitLab An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from…CVE-2024-3303 CVE 5.7 Fixed nvd.nist.gov
NVIDIATriton Inference Server NVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user could cause an…CVE-2024-53880 CVE 6.5 Research disclosed nvd.nist.gov
PandasAI PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python…CVE-2024-12366 CVE 9.8 Research disclosed nvd.nist.gov
vLLM vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cacheCVE-2025-25183 CVE 2.6 Fixed github.com
deep-diver LLM-As-Chatbot An issue in deep-diver LLM-As-Chatbot before commit 99c2c03 allows a remote attacker to execute arbitrary…CVE-2024-55241 CVE 8.8 Fixed nvd.nist.gov
vLLM vllm: Malicious model to RCE by torch.load in hf_model_weights_iteratorCVE-2025-24357 CVE 8.8 Fixed github.com
Themeisle AI Chatbot for WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…CVE-2025-24666 CVE 5.9 Research disclosed nvd.nist.gov
WPBotWpot The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing…CVE-2024-13091 CVE 9.8 Research disclosed nvd.nist.gov
QuantumcloudWpot The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due…CVE-2024-12879 CVE 4.3 Research disclosed nvd.nist.gov
Gradio Gradio Blocked Path ACL Bypass VulnerabilityCVE-2025-23042 CVE 7.5 Fixed github.com
QuantumCloud Conversational Forms for ChatBot Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…CVE-2025-22813 CVE 6.5 Research disclosed nvd.nist.gov
Chative Live chat and Chatbot The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all…CVE-2024-12541 CVE 5.4 Research disclosed nvd.nist.gov
MaxKB MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based…CVE-2024-56137 CVE 7.2 Fixed nvd.nist.gov
Smartsupp Smartsupp Cross-Site Request Forgery (CSRF) vulnerability in Smartsupp Smartsupp – live chat, chatbots, AI and lead…CVE-2024-38790 CVE 6.5 Research disclosed nvd.nist.gov

Launching something? Read the launch security checklist.