AnythingLLM: Prior to 1.13.0, the AnythingLLM agent filesystem copy tool validates only the top-level source…
Affects: AnythingLLM
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
Gradio: Gradio contains a cookie injection vulnerability
Affects: Gradio
Langflow: IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper…
Affects: Langflow
LangChain: LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly…
Affects: LangChain
vLLM: vllm has Improper Resource Shutdown or Release
Affects: vLLM
MLflow: MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts`…
Affects: MLflow
Hugging Face Transformers: HuggingFace transformers vulnerable to remote code execution
Affects: Hugging Face Transformers
LiteLLM: LiteLLM allows a user to modify their own user_role via the /user/update endpoint
Affects: LiteLLM
LiteLLM: LiteLLM allows an authenticated internal_user to create API keys with access to routes that…
Affects: LiteLLM
MLflow: MLflow authenticated users can enumerate any registered model versions due to lack of per-model…
Affects: MLflow
Flowise: Mass Assignment in PUT /api/v1/user Allows Authenticated Users to Override Password Hash and…
Affects: Flowise
Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage
Affects: Flowise
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an…
Affects: NVIDIA Triton Inference Server
n8n: Legacy ExecuteWorkflow Node Bypassed File Path Restrictions
Affects: n8n
MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated…
Affects: MLflow
MLflow: MLFlow Creates a Temporary File With Insecure Permissions
Affects: MLflow
Chroma: ChromaDB Python project has a pre-authentication code injection vulnerability
Affects: Chroma
Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)
Affects: Open WebUI
Open WebUI: Open WebUI has an Indirect Object Reference (IDOR) in user notes
Affects: Open WebUI
Open WebUI: Prior to 0.8.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Banner component…
Affects: Open WebUI
Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]
Affects: Open WebUI
Open WebUI: Open WebUI Exposes System Prompt to Regular User [Non-Admin]
Affects: Open WebUI
Open WebUI: Open WebUI's chat completion API allows tool restrictions to be bypassed
Affects: Open WebUI
Open WebUI: Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function
Affects: Open WebUI
Open WebUI: Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer…
Affects: Open WebUI
Open WebUI: Open WebUI missing authorization check at the model update function - models from other users…
Affects: Open WebUI
Open WebUI: Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
Affects: Open WebUI
Open WebUI: Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html}…
Affects: Open WebUI
Open WebUI: Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation
Affects: Open WebUI
Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only…
Affects: Open WebUI
Open WebUI: Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions
Affects: Open WebUI
Open WebUI: Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image
Affects: Open WebUI
Open WebUI: Open WebUI has stored XSS via the HTML renedering view
Affects: Open WebUI
Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete…
Affects: Open WebUI
Open WebUI: Open WebUI has Stored Cross-Site Scripting In Profile Picture
Affects: Open WebUI
Open WebUI: Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read…
Affects: Open WebUI
Open WebUI: Open WebUI has inconsistent authorization controls within memories API
Affects: Open WebUI
Open WebUI: Open WebUI's Insecure Message Access Breaks Authorization
Affects: Open WebUI
Open WebUI: Open WebUI has Improper Authorization Control
Affects: Open WebUI
Open WebUI: Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal
Affects: Open WebUI
Open WebUI: Open WebUI Arbitrary File Write, Delete via Path Traversal
Affects: Open WebUI
Open WebUI: Open WebUI has stored XSS in Excel file preview
Affects: Open WebUI