LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
Affects: LiteLLM
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
106 advisories rated Critical
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to…
Affects: Langflow
Flowise: An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the…
Affects: Flowise
n8n: N8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free…
Affects: n8n
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
LiteLLM: LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
Affects: LiteLLM
n8n: N8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in…
Affects: n8n
n8n: N8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB…
Affects: n8n
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause…
Affects: NVIDIA Triton Inference Server
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via…
Affects: MLflow
Langflow: IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access…
Affects: Langflow
Flowise: Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that…
Affects: Flowise
Flowise: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass
Affects: Flowise
n8n: N8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression…
Affects: n8n
Flowise: Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI…
Affects: Flowise
Langflow: Weak Fernet Key via random.seed()
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0…
Affects: Langflow
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens, enables token theft for any…
Affects: Flowise
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
Affects: Flowise
Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
Affects: Flowise
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without…
Affects: Flowise
Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist…
Affects: Flowise
Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig`…
Affects: Flowise
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution…
Affects: Langflow
n8n: Computer-use Shell Sandbox Not Enforced on Linux and Windows
Affects: n8n
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to…
Affects: Langflow
Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain…
Affects: Langflow
Open WebUI: Open-webui before 0.3.14 contains a cross-origin resource sharing misconfiguration allowing…
Affects: Open WebUI
Open WebUI: Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth…
Affects: Open WebUI
Flowise: Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT…
Affects: Flowise
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
Affects: Open WebUI