n8n: Wrong OAuth Scope On Evaluations Test Run Creation Endpoint
Affects: n8n
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
331 advisories rated High
Chroma: ChromaDB has a code injection vulnerability
Affects: Chroma
Chroma: All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and…
Affects: Chroma
Chroma: ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a…
Affects: Chroma
Chroma: ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in…
Affects: Chroma
Langflow: IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify…
Affects: Langflow
Keras: Keras archive extraction utilities allow path traversal and arbitrary file writes
Affects: Keras
vLLM: vLLM is vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded…
Affects: vLLM
Flowise: FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover
Affects: Flowise
Flowise: FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover
Affects: Flowise
Flowise: FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover
Affects: Flowise
Flowise: FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover
Affects: Flowise
Flowise: FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeover
Affects: Flowise
Flowise: FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover
Affects: Flowise
Flowise: FlowiseAI: Vector Store No Permission Checks
Affects: Flowise
Flowise: FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow…
Affects: Flowise
Milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and…
Affects: Milvus
MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration
Affects: MLflow
AnythingLLM: Prior to 1.13.0, the filesystem-search-files agent skill passes its LLM-controlled pattern…
Affects: AnythingLLM
Langflow: IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled…
Affects: Langflow
LangChain: LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly…
Affects: LangChain
Hugging Face Transformers: HuggingFace transformers vulnerable to remote code execution
Affects: Hugging Face Transformers
LiteLLM: LiteLLM allows a user to modify their own user_role via the /user/update endpoint
Affects: LiteLLM
LiteLLM: LiteLLM allows an authenticated internal_user to create API keys with access to routes that…
Affects: LiteLLM
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path…
Affects: NVIDIA Triton Inference Server
MLflow: MLFlow Creates a Temporary File With Insecure Permissions
Affects: MLflow
Open WebUI: Prior to 0.8.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Banner component…
Affects: Open WebUI
Open WebUI: Open WebUI's chat completion API allows tool restrictions to be bypassed
Affects: Open WebUI
Open WebUI: Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
Affects: Open WebUI
Open WebUI: Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions
Affects: Open WebUI
Open WebUI: Open WebUI has stored XSS via the HTML renedering view
Affects: Open WebUI
Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete…
Affects: Open WebUI
Open WebUI: Open WebUI has inconsistent authorization controls within memories API
Affects: Open WebUI
Open WebUI: Open WebUI's Insecure Message Access Breaks Authorization
Affects: Open WebUI
Open WebUI: Open WebUI has Improper Authorization Control
Affects: Open WebUI
Open WebUI: Open WebUI Arbitrary File Write, Delete via Path Traversal
Affects: Open WebUI
Open WebUI: Open WebUI has stored XSS in Excel file preview
Affects: Open WebUI
Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false`, feature gate bypassed
Affects: Open WebUI
Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach…
Affects: Open WebUI
Open WebUI: Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints…
Affects: Open WebUI
Open WebUI: Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url`
Affects: Open WebUI
Open WebUI: Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls
Affects: Open WebUI
Open WebUI: Prior to 0.9.5, the tool update endpoint (POST /api/v1/tools/id/{id}/update) is missing the…
Affects: Open WebUI
Open WebUI: open-webui Vulnerable to Stored XSS via Model Description
Affects: Open WebUI
Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts
Affects: Open WebUI
Open WebUI: Shared-chat branch ignores access_type, allowing unauthorized file deletion
Affects: Open WebUI
Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing…
Affects: Open WebUI