vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
Affects: vLLM
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`
Affects: LiteLLM
LiteLLM: LiteLLM vulnerable to reflected XSS in /sso/debug/callback
Affects: LiteLLM
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
Affects: LiteLLM
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke…
Affects: MLflow
vLLM: DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL…
Affects: vLLM
vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of…
Affects: vLLM
Jupyter: Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization
Affects: Jupyter
MLflow: MLflow FileStore trace IDs allow path traversal and arbitrary file writes
Affects: MLflow
Jupyter: JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one…
Affects: Jupyter
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Affects: Langflow
Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices…
Affects: Langflow
Langflow: Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers
Affects: Langflow
Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
vLLM: A security flaw has been discovered in vllm-project vLLM up to 0.31.0
Affects: vLLM
Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS…
Affects: Langflow
vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion
Affects: vLLM
vLLM: Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method…
Affects: vLLM
vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames…
Affects: vLLM
vLLM: Structured-output request errors escape the request boundary and terminate the shared…
Affects: vLLM
vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments…
Affects: vLLM
vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id…
Affects: vLLM
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
Affects: vLLM
vLLM: Mirrored multimodal IPC caches desync after a rejected request, a later request reusing the same…
Affects: vLLM
vLLM: Harmony tool continuations drop `cache_salt`, restoring a cross-tenant prefix-cache membership…
Affects: vLLM
Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
Affects: Langflow