Articles
Daily digests summarizing the vulnerabilities and incidents tracked by VulnWatch.
-
· 9 entries · daily · Subscribers only
VulnWatch Digest: Critical Mistral RCE and Copilot Injection Flaws
OpenStack Mistral faces a critical RCE vulnerability while Microsoft Copilot struggles with multiple injection flaws. ML infrastructure libraries also report weak hash vulnerabilities affecting dataset integrity.
-
· 4 entries · daily · Subscribers only
VulnWatch Daily: Critical MLflow Secret Leak and Transformers RCE
Today's digest covers critical credential exfiltration in MLflow, a high-severity RCE in Hugging Face Transformers, and UI vulnerabilities in Kimi AI and SGLang.
-
· 7 entries · daily · Subscribers only
Critical RCE and Secret Leakage Plague AI Agent Platforms in June 2026 Digest
Seven new vulnerabilities target LibreChat, OpenClaude, and MLflow. Critical risks include MCP secret leakage, prompt-injection RCE, and insecure model loading. Immediate patching is required.
-
· 8 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in Langroid & MCP Auth Bypasses
Today's digest highlights critical RCE risks in AI agent frameworks via prompt injection and SQL execution, alongside significant authentication bypasses in MCP servers and workspace platforms.
-
· 78 entries · weekly
VulnWatch Weekly: Agentic RCE Epidemic & MCP Trust Boundaries Collapse
78 vulnerabilities tracked this week. PraisonAI, SillyTavern, and MCP servers dominate critical RCE reports. Immediate patching required for agent frameworks.
-
· 14 entries · daily · Subscribers only
VulnWatch Daily: Legacy Router Flaws and AI Toolchain Risks
14 new vulnerabilities reported today affecting legacy network infrastructure and AI coding assistants. Immediate segmentation and tooling reviews recommended for AI security teams.
-
· 5 entries · daily · Subscribers only
VulnWatch Daily: Legacy Network Gear Risks AI Infrastructure Integrity
Five critical CVEs in EOL TRENDnet routers highlight supply chain risks for ML labs. Immediate network segmentation and hardware lifecycle audits are recommended.
-
· 28 entries · daily · Subscribers only
VulnWatch Daily: Agentic Frameworks Crisis & Local LLM UI Risks
Critical sandbox escapes in PraisonAI and auth bypasses in SillyTavern dominate today's digest. MCP ecosystem and RAG platforms also show significant supply chain risks requiring immediate patching.
-
· 10 entries · daily · Subscribers only
VulnWatch Daily: Critical Agent Escapes and Model Serving RCE
Today's digest highlights critical vulnerabilities in CodeWhale agents, vllm model serving, and AnythingLLM. Immediate patching is recommended for agentic workflows.
-
· 17 entries · daily · Subscribers only
VulnWatch Daily: Critical RCEs in AI Agents and Build Pipelines
Today's digest highlights critical remote code execution risks in Langroid, BentoML, and Langflow, alongside a significant cluster of Symfony framework vulnerabilities affecting enterprise integrations.
-
· 19 entries · daily · Subscribers only
VulnWatch Daily: Critical Agent Control Bypasses and Twig RCE Cluster
19 new vulnerabilities reported today including active Langflow exploitation, critical MCP auth bypasses, and a massive cluster of Twig RCEs affecting AI rendering pipelines.
-
· 16 entries · daily · Subscribers only
VulnWatch: NVIDIA Inference Stack Critical Flaws & AI Supply Chain Risks
Critical authentication bypasses in NVIDIA Triton and deserialization risks in TRT-LLM dominate today's digest. Plus, new supply chain threats in Diffusers and agent tooling.
-
· 17 entries · daily · Subscribers only
VulnWatch Daily: MCP RCE, Supply Chain Worms, and MLflow Risks
Critical MCP RCEs and a renewed npm worm campaign dominate today's digest. MLflow and AutoGPT users must patch immediately to prevent agent compromise.
-
· 17 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in SGLangs and ChromaDB; Mistral Supply Chain
Today's digest highlights critical RCE vulnerabilities in SGLangs and ChromaDB, alongside a confirmed malicious dropper in the Mistral AI PyPI package. Immediate patching and supply chain verification are required.
-
· 102 entries · weekly
VulnWatch Weekly: MCP Security Crisis & Model Loading RCE Surge
This week exposes critical risks in Model Context Protocol implementations, unsafe model deserialization in PyTorch/Diffusers, and agentic RCE chains. Immediate patching required for SOCFortress, ART, and Open WebUI.