Articles
Daily digests summarizing the vulnerabilities and incidents tracked by VulnWatch.
-
· 28 entries · daily · Subscribers only
VulnWatch Daily: MCP Server Risks Surge & Langflow Critical Flaws
28 new vulnerabilities reported today, highlighting critical risks in Model Context Protocol servers, Langflow platform integrity, and supply chain attacks via model loading.
-
· 43 entries · daily · Subscribers only
VulnWatch Daily: PraisonAI Critical RCE Cluster & MCP Auth Failures
Over 40 AI vulnerabilities disclosed today, led by critical RCE chains in PraisonAI and unauthenticated MCP servers. Immediate patching recommended for agentic frameworks.
-
· 29 entries · daily · Subscribers only
VulnWatch Daily: Critical Oracle Coherence RCE and Agent Control Plane Exposures
29 new vulnerabilities reported today including CVSS 10.0 Oracle Coherence flaws, widespread MCP agent misconfigurations, and inference engine robustness issues in vLLM and Open WebUI.
-
· 25 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in Langflow & Crawl4AI Docker APIs
25 new vulnerabilities reported today. Critical RCE risks in Langflow and Crawl4AI demand immediate patching. Model serving engines and web frameworks also affected.
-
· 52 entries · weekly
MCP Meltdown & Flowise Flood: Critical AI Infra Vulnerabilities Surge
Critical MCP auth bypasses and Flowise RCEs dominate this week. LiteLLM command injection is actively exploited. ChromaDB and vLLM also ship high-severity patches. Immediate action required on agent frameworks.
-
· 9 entries · daily · Subscribers only
VulnWatch Daily: Critical MCP Flaws & ML Framework Risks (2026-06-11)
Nine new vulnerabilities reported today, including critical authentication bypasses in Model Context Protocol servers and resource exhaustion risks in vLLM. Immediate patching recommended for MCP integrations and Keras pipelines.
-
· 78 entries · weekly
VulnWatch Weekly: Agentic RCE Epidemic & MCP Trust Boundaries Collapse
78 vulnerabilities tracked this week. PraisonAI, SillyTavern, and MCP servers dominate critical RCE reports. Immediate patching required for agent frameworks.
-
· 14 entries · daily · Subscribers only
VulnWatch Daily: Legacy Router Flaws and AI Toolchain Risks
14 new vulnerabilities reported today affecting legacy network infrastructure and AI coding assistants. Immediate segmentation and tooling reviews recommended for AI security teams.
-
· 28 entries · daily · Subscribers only
VulnWatch Daily: Agentic Frameworks Crisis & Local LLM UI Risks
Critical sandbox escapes in PraisonAI and auth bypasses in SillyTavern dominate today's digest. MCP ecosystem and RAG platforms also show significant supply chain risks requiring immediate patching.
-
· 10 entries · daily · Subscribers only
VulnWatch Daily: Critical Agent Escapes and Model Serving RCE
Today's digest highlights critical vulnerabilities in CodeWhale agents, vllm model serving, and AnythingLLM. Immediate patching is recommended for agentic workflows.
-
· 17 entries · daily · Subscribers only
VulnWatch Daily: MCP RCE, Supply Chain Worms, and MLflow Risks
Critical MCP RCEs and a renewed npm worm campaign dominate today's digest. MLflow and AutoGPT users must patch immediately to prevent agent compromise.
-
· 17 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in SGLangs and ChromaDB; Mistral Supply Chain
Today's digest highlights critical RCE vulnerabilities in SGLangs and ChromaDB, alongside a confirmed malicious dropper in the Mistral AI PyPI package. Immediate patching and supply chain verification are required.
-
· 102 entries · weekly
VulnWatch Weekly: MCP Security Crisis & Model Loading RCE Surge
This week exposes critical risks in Model Context Protocol implementations, unsafe model deserialization in PyTorch/Diffusers, and agentic RCE chains. Immediate patching required for SOCFortress, ART, and Open WebUI.
-
· 41 entries · daily · Subscribers only
VulnWatch Daily: Critical Agent RCE and Open WebUI Access Control Flaws
41 new vulnerabilities reported today, including critical RCE in DeepSeek TUI and widespread access control failures in Open WebUI. Immediate patching recommended for AI agent frameworks.
-
· 9 entries · daily · Subscribers only
VulnWatch Daily: Agentic Auth Bypasses and CLI RCE Risks Surge
Critical MCP authorization flaws and local CLI RCE vulnerabilities dominate today's digest. Security teams must audit agent tooling and desktop clients immediately.