Articles
Daily digests summarizing the vulnerabilities and incidents tracked by VulnWatch.
-
· 6 entries · daily · Subscribers only
VulnWatch Daily: Critical File Reads in Firecrawl & Agent RCE in Goose
Today's digest covers critical vulnerabilities in AI data pipelines and agentic frameworks, including arbitrary file reads in Firecrawl, unauthorized file access in Flowise, and pre-prompt RCE in the Goose agent.
-
· 116 entries · weekly
VulnWatch Weekly: The Flowise Apocalypse & Active Langflow Exploitation
This week marks a critical turning point for AI platform security with a massive cluster of RCE vulnerabilities in Flowise and active exploitation of IBM Langflow. Immediate patching is required for model serving stacks and agentic frameworks.
-
· 33 entries · daily · Subscribers only
Langflow Catastrophe: 20+ RCEs, Supply Chain Risks, and Agentic Flaws
A historic wave of vulnerabilities hits IBM Langflow with 20+ CVEs including unauthenticated RCE. Critical issues also found in PraisonAI CI/CD, Hugging Face PEFT deserialization, and Milvus DoS.
-
· 43 entries · daily · Subscribers only
Critical Flowise RCE Wave and Langflow Injection Compromise AI Supply Chain
A massive cluster of vulnerabilities in Flowise and a critical CISA-listed flaw in Langflow expose AI platforms to unauthenticated RCE, credential theft, and supply-chain compromise. Immediate patching and network isolation are required.
-
· 58 entries · weekly
VulnWatch Weekly: The Agentic Apocalypse & Supply Chain Meltdown
This week marks a turning point for AI security with critical RCEs in Langflow, Flyto2, and sentence-transformers. The dominant theme is the collapse of trust boundaries in agentic workflows, demanding immediate patching of model serving and orchestration layers.
-
· 20 entries · daily · Subscribers only
Critical Agentic Vulnerabilities: Flyto2, Langflow, and MCP SDK Exploits
A surge of critical vulnerabilities in AI agent frameworks allows arbitrary code execution, secret exfiltration, and cross-tenant data leakage. Immediate patching is required for Flyto2 Core, IBM Langflow, and MCP SDKs.
-
· 14 entries · daily · Subscribers only
VulnWatch Daily: Critical SSRF in Flyto2, MCP SDK Flaws, and Agent Auth Bypasses
Today's digest covers critical SSRF vulnerabilities in Flyto2 Core exposing API keys, a cluster of DoS and session hijacking flaws in the MCP Ruby SDK, and auth bypasses in Quarkus and Pydantic AI affecting generative workflows.
-
· 9 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in pglogical, ESP32 Overflow, and MCP DoS
Today's digest covers critical privilege escalation in PostgreSQL pglogical, a heap overflow in ESP32 audio libraries, and multiple availability issues in Model Context Protocol servers affecting AI agent deployments.
-
· 4 entries · daily · Subscribers only
VulnWatch Daily: Llama.cpp DoS Risks and Kimi Code SSRF Flaws
Today's digest covers critical supply-chain risks in GIMP affecting AI data pipelines, denial-of-service vectors in llama.cpp's schema parsing, and a significant SSRF vulnerability in Kimi Code allowing internal network access via prompt injection.
-
· 120 entries · weekly
VulnWatch Weekly: Oracle Coherence Flood, Supply Chain Poisoning, and Agentic RCE
This week saw an unprecedented flood of Oracle Coherence RCEs, a critical npm supply chain compromise, and severe agentic vulnerabilities in M365 Copilot and PraisonAI. Immediate patching and supply chain audits are required.
-
· 20 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in Prompty, Copilot, and Agentic Supply Chains
Today's digest highlights critical remote code execution flaws in Prompty and M365 Copilot, alongside severe agentic vulnerabilities in Suna, Budibase, and AWS Bedrock that threaten multi-tenant isolation and credential security.
-
· 120 entries · weekly
VulnWatch Weekly: The Langflow Catastrophe & MCP Supply Chain Risks
This week is dominated by a critical cluster of RCE and auth-bypass flaws in IBM Langflow, alongside severe multi-tenant isolation failures in the emerging Model Context Protocol (MCP) ecosystem. Immediate patching is required for Langflow instances and MCP servers handling sensitive workflows.
-
· 33 entries · daily · Subscribers only
Langflow Catastrophe: 15 Critical Flaws Enable Unauthenticated RCE
A massive cluster of critical vulnerabilities in IBM Langflow allows unauthenticated remote code execution via default configurations. Additional risks identified in AI IDEs, MCP servers, and inference engines require immediate attention.
-
· 15 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in SGLang, Kiota Path Traversal, and MCP Supply Chain Risks
Today's digest highlights critical RCE in SGLang's ZeroMQ interface, path traversal in Microsoft Kiota plugins, and multiple supply chain vulnerabilities affecting Model Context Protocol (MCP) servers and agents.
-
· 19 entries · daily · Subscribers only
VulnWatch Daily: Critical MCP Supply Chain & Agentic RCE Surge
A wave of critical vulnerabilities targets the Model Context Protocol (MCP) ecosystem, enabling tenant data leakage, unauthenticated RCE, and SSRF in major AI orchestration tools including n8n, LangBot, and Grafana.