n8n: N8n before 1.123.24, 2.10.4, and 2.12.0 (across its 1.x and 2.x branches) contains cross-site…
Affects: n8n
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
Open WebUI: open-webui terminal proxy path traversal guard bypass via 9x encoded traversal
Affects: Open WebUI
Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update…
Affects: Open WebUI
Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation…
Affects: Open WebUI
Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation
Affects: Open WebUI
Open WebUI: Arena task endpoints can bypass underlying model access controls
Affects: Open WebUI
Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id…
Affects: Open WebUI
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary…
Affects: Open WebUI
Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials
Affects: Open WebUI
Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config
Affects: Open WebUI
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout
Affects: Open WebUI
Open WebUI: Account enumeration via observable login timing discrepancy
Affects: Open WebUI
Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users…
Affects: Open WebUI
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
Affects: Open WebUI
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
Affects: Open WebUI
Open WebUI: Stored web worker XSS via Pyodide
Affects: Open WebUI
Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs…
Affects: Open WebUI
Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete
Affects: Open WebUI
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
Affects: n8n
n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
Affects: n8n
n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
Affects: n8n
n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project…
Affects: n8n
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
Affects: LiteLLM
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
Affects: LiteLLM
LiteLLM: Arbitrary file write via path traversal in Skills archive extraction
Affects: LiteLLM
LiteLLM: Local file read via request-supplied OIDC file references
Affects: LiteLLM
n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression…
Affects: n8n
n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other…
Affects: n8n
n8n: N8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API…
Affects: n8n
n8n: N8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST…
Affects: n8n
n8n: N8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three…
Affects: n8n
n8n: N8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk…
Affects: n8n
n8n: N8n before 2.8.0 contains a cross-site scripting vulnerability in the credential management flow…
Affects: n8n
Open WebUI: Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality
Affects: Open WebUI
Open WebUI: Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages
Affects: Open WebUI
Open WebUI: Open WebUI vulnerable to Stored XSS via iFrame in citations model
Affects: Open WebUI
Open WebUI: Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte…
Affects: Open WebUI
Open WebUI: Open WebUI allows limited stored XSS vila uploaded html file
Affects: Open WebUI
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
Affects: vLLM
vLLM: vLLM denial of service via prompt embeds on M-RoPE models
Affects: vLLM
vLLM: vLLM has Remote DoS via Invalid Recovered Token Reinjection
Affects: vLLM
vLLM: Speech-to-text upload size limit is enforced after full UploadFile read
Affects: vLLM
Keras: Lambda deserialization can bypass safe mode and execute code
Affects: Keras
Weaviate: Weaviate before 1.38.0 does not verify that a principal performing an RBAC role assignment holds…
Affects: Weaviate
MLflow: Trace API endpoints lack proper authorization validators
Affects: MLflow
Gradio: Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks
Affects: Gradio
Keras: HDF5 virtual datasets can disclose local files
Affects: Keras
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and…
Affects: Ray
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause…
Affects: NVIDIA Triton Inference Server