Open WebUI: Stored web worker XSS via Pyodide
Affects: Open WebUI
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
106 advisories rated Critical
Keras: Lambda deserialization can bypass safe mode and execute code
Affects: Keras
Flowise: Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses a weak hardcoded default secret…
Affects: Flowise
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials…
Affects: Langflow
Langflow: Code Injection Vulnerability in Code Validation Endpoint
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the…
Affects: Langflow
Flowise: Flowise through 2.2.7 fails to sanitize path segments in the document-store loader endpoint…
Affects: Flowise
Flowise: Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and earlier) contains an unsandboxed…
Affects: Flowise
Flowise: Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access…
Affects: Flowise
Flowise: Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the…
Affects: Flowise
Flowise: Flowise contains an authentication bypass vulnerability in the unprotected…
Affects: Flowise
n8n: N8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and…
Affects: n8n
Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
Affects: Langflow
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
Affects: Langflow
n8n: Credential Exfiltration via Permission Bypass
Affects: n8n
n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints
Affects: n8n
Langflow: Unauthenticated RCE in Shareable Playgrounds
Affects: Langflow
n8n: n8n Has a Source Control Pull SQL Injection
Affects: n8n
n8n: n8n Has an XML Node Prototype Pollution Patch Bypass
Affects: n8n
n8n: HTTP Request Node Pagination Prototype Pollution to RCE
Affects: n8n
n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes
Affects: n8n
n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions
Affects: n8n
Flowise: Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom MCP…
Affects: Flowise
vLLM: OpenAI auth bypass
Affects: vLLM
n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass
Affects: n8n
LiteLLM: Authentication Bypass via Host Header Injection
Affects: LiteLLM
Langflow: IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected…
Affects: Langflow
Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege…
Affects: Langflow
LiteLLM: MCP Proxy Has Improper Authentication
Affects: LiteLLM
Flowise: FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox…
Affects: Flowise
Flowise: FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource…
Affects: Flowise
Flowise: FlowiseAI Exposes Basic Auth Credentials via API
Affects: Flowise
Flowise: FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource…
Affects: Flowise
Hugging Face Transformers: huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue…
Affects: Hugging Face Transformers
Langflow: IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper…
Affects: Langflow
MLflow: MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts`…
Affects: MLflow
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an…
Affects: NVIDIA Triton Inference Server
MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated…
Affects: MLflow
Chroma: ChromaDB Python project has a pre-authentication code injection vulnerability
Affects: Chroma
Open WebUI: Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal
Affects: Open WebUI
Open WebUI: Open WebUI has an LDAP Empty Password Authentication Bypass
Affects: Open WebUI
Jupyter: JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted…
Affects: Jupyter