Articles
Daily digests summarizing the vulnerabilities and incidents tracked by VulnWatch.
-
· 1 entry · daily · Subscribers only
Critical Auth Bypass in WordPress Plugin Highlights AI Function Calling Risks
A critical type confusion vulnerability in the User Profile Builder plugin allows authentication bypass via malformed usernames, exposing risks in AI-driven function calling chains.
-
· 6 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in MindsDB and MCP Supply Chain Risks
Today's digest highlights a CVSS 10.0 unauthenticated RCE in MindsDB, command injection in Token Optimizer MCP, and a cluster of cache poisoning and SSRF issues in CKAN MCP Server affecting AI agent integrity.
-
· 28 entries · daily · Subscribers only
VulnWatch Daily: Critical Agentic RCE and Supply Chain Flaws in Trigger.dev, vLLM, and Flowise
Today's digest highlights critical remote code execution risks in agentic frameworks like Trigger.dev and AgenticSeek, alongside severe prompt injection bypasses in Flowise and SSRF vulnerabilities in MCP servers. Immediate patching is required for multi-tenant isolation failures.
-
· 6 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in Prompty Templates and MCP Supply Chain Risks
Today's digest highlights a critical template injection flaw in Prompty allowing host RCE, alongside severe command injection and path traversal vulnerabilities in emerging Model Context Protocol (MCP) servers affecting Stata and Atlassian integrations.
-
· 20 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in AI Agents and Supply Chain Leaks
Today's digest highlights a critical RCE in PapersGPT via prompt injection, unauthenticated CLI servers in Claude Code, and widespread credential exfiltration risks in AI workflow platforms.
-
· 6 entries · daily · Subscribers only
VulnWatch Daily: Critical File Reads in Firecrawl & Agent RCE in Goose
Today's digest covers critical vulnerabilities in AI data pipelines and agentic frameworks, including arbitrary file reads in Firecrawl, unauthorized file access in Flowise, and pre-prompt RCE in the Goose agent.
-
· 116 entries · weekly
VulnWatch Weekly: The Flowise Apocalypse & Active Langflow Exploitation
This week marks a critical turning point for AI platform security with a massive cluster of RCE vulnerabilities in Flowise and active exploitation of IBM Langflow. Immediate patching is required for model serving stacks and agentic frameworks.
-
· 6 entries · daily · Subscribers only
MCP Ecosystem Plagued by Path Traversal; Ash Framework Risks DoS
Today's digest highlights a critical wave of path traversal vulnerabilities in Model Context Protocol (MCP) servers affecting Gemini, Claude, and Ollama integrations, alongside a memory exhaustion flaw in the Ash framework.
-
· 3 entries · daily · Subscribers only
VulnWatch Daily: Critical WP Plugin Flaw & MCP Command Injection Risks
Today's digest highlights a critical authorization bypass in a WordPress AI plugin enabling full site takeover, alongside two command injection vulnerabilities in emerging Model Context Protocol (MCP) gateways affecting Claude and local LLM memory tools.
-
· 19 entries · daily · Subscribers only
Critical RCE Wave Hits llama.cpp and MCP Frameworks
A surge of critical vulnerabilities targets core AI infrastructure, including sandbox escapes in Model Context Protocol and multiple memory corruption flaws in llama.cpp enabling remote code execution.
-
· 33 entries · daily · Subscribers only
Langflow Catastrophe: 20+ RCEs, Supply Chain Risks, and Agentic Flaws
A historic wave of vulnerabilities hits IBM Langflow with 20+ CVEs including unauthenticated RCE. Critical issues also found in PraisonAI CI/CD, Hugging Face PEFT deserialization, and Milvus DoS.
-
· 43 entries · daily · Subscribers only
Critical Flowise RCE Wave and Langflow Injection Compromise AI Supply Chain
A massive cluster of vulnerabilities in Flowise and a critical CISA-listed flaw in Langflow expose AI platforms to unauthenticated RCE, credential theft, and supply-chain compromise. Immediate patching and network isolation are required.
-
· 7 entries · daily · Subscribers only
VulnWatch Daily: Critical TLS Flaws and Agentic RCE Risks Surge
Today's digest highlights a critical TLS verification bypass in Emlog Pro, incomplete denylists in Ouroboros enabling RCE, and prompt injection vectors in Amazon Strands and MQ MCP Server.
-
· 58 entries · weekly
VulnWatch Weekly: The Agentic Apocalypse & Supply Chain Meltdown
This week marks a turning point for AI security with critical RCEs in Langflow, Flyto2, and sentence-transformers. The dominant theme is the collapse of trust boundaries in agentic workflows, demanding immediate patching of model serving and orchestration layers.
-
· 2 entries · daily · Subscribers only
VulnWatch Digest: Critical File Write in Transformers & Keras Data Leak
Today's briefing covers a high-severity arbitrary file write in Hugging Face Transformers and a medium-severity HDF5 content disclosure flaw in Keras, both published August 2, 2026.