Articles
Daily digests summarizing the vulnerabilities and incidents tracked by VulnWatch.
-
· 120 entries · weekly
VulnWatch Weekly: MCP Servers Under Siege, LLM RCE via Pickle
This week's digest highlights a critical wave of vulnerabilities in Model Context Protocol (MCP) servers, featuring unauthenticated RCEs, SSRF chains, and token theft. We also cover severe pickle deserialization flaws in LLM serving stacks like LMDeploy and vLLM.
-
· 20 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in LMDeploy, MCP Auth Bypasses, and vLLM DoS
Today's digest highlights a critical pickle deserialization RCE in LMDeploy, unauthenticated file reads in MCP servers leading to token theft, and multiple denial-of-service vectors in vLLM and Chroma affecting multi-tenant isolation.
-
· 89 entries · weekly
VulnWatch Weekly: The Agentic Apocalypse & The Langflow Meltdown
This week marks a turning point for AI security as critical RCEs plague agentic frameworks like Mistral Vibe and Langflow. With 89 new entries, the dominant theme is the collapse of trust boundaries in autonomous agents and model serving pipelines.
-
· 5 entries · daily · Subscribers only
VulnWatch Daily: Critical MCP RCEs and Supply Chain Risks in AI Agents
Today's digest highlights critical Remote Code Execution flaws in Model Context Protocol servers, including command injection in AWS tools and package alias abuse. We also cover data leakage in Nuxt Ollama and DoS vectors in Kotlin SDKs and TOML parsers affecting AI agents.
-
· 93 entries · weekly
VulnWatch Weekly: The MCP Security Crisis & Langflow RCE
This week marks a turning point for AI security with critical RCEs in Langflow and a systemic collapse of authentication in the Model Context Protocol (MCP) ecosystem. Immediate patching is required for Kubeflow, Langflow, and all exposed MCP servers.
-
· 46 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE and Auth Bypasses in MCP Ecosystem
August 25, 2026: A surge of critical vulnerabilities targets the Model Context Protocol (MCP) ecosystem, featuring unauthenticated RCE via command injection, unsafe math parsing, and widespread authentication bypasses in agentic frameworks.
-
· 33 entries · daily · Subscribers only
VulnWatch Daily: Critical Agent Escapes and Platform Instability Surge
33 new vulnerabilities reported today, including critical RCE in Langroid and Crawl4AI, plus extensive authentication flaws in Coder. Immediate patching recommended for AI inference and agent frameworks.
-
· 79 entries · weekly
VulnWatch Weekly: Langflow Cascade & MCP Ecosystem Risks
Langflow faces a critical week with 10+ CVEs including RCE and secret leakage. MCP servers show systemic auth flaws. Action required on model loading.
-
· 10 entries · daily · Subscribers only
VulnWatch Daily: MCP Servers Face Injection Risks; Triton DoS Patched
Today's digest highlights critical injection flaws in Model Context Protocol servers, alongside denial-of-service vectors in NVIDIA Triton and supply-chain risks in AI development tools.
-
· 120 entries · weekly
VulnWatch Weekly: PraisonAI Auth Collapse & MCP Server Exposure
This week saw a cascade of critical vulnerabilities in PraisonAI agents and widespread authentication failures in Model Context Protocol servers. Oracle Coherence and Langflow also shipped critical RCEs requiring immediate patching.
-
· 28 entries · daily · Subscribers only
VulnWatch Daily: MCP Server Risks Surge & Langflow Critical Flaws
28 new vulnerabilities reported today, highlighting critical risks in Model Context Protocol servers, Langflow platform integrity, and supply chain attacks via model loading.
-
· 52 entries · weekly
MCP Meltdown & Flowise Flood: Critical AI Infra Vulnerabilities Surge
Critical MCP auth bypasses and Flowise RCEs dominate this week. LiteLLM command injection is actively exploited. ChromaDB and vLLM also ship high-severity patches. Immediate action required on agent frameworks.
-
· 9 entries · daily · Subscribers only
VulnWatch Daily: Critical MCP Flaws & ML Framework Risks (2026-06-11)
Nine new vulnerabilities reported today, including critical authentication bypasses in Model Context Protocol servers and resource exhaustion risks in vLLM. Immediate patching recommended for MCP integrations and Keras pipelines.
-
· 102 entries · weekly
VulnWatch Weekly: MCP Security Crisis & Model Loading RCE Surge
This week exposes critical risks in Model Context Protocol implementations, unsafe model deserialization in PyTorch/Diffusers, and agentic RCE chains. Immediate patching required for SOCFortress, ART, and Open WebUI.
-
· 41 entries · daily · Subscribers only
VulnWatch Daily: Critical Agent RCE and Open WebUI Access Control Flaws
41 new vulnerabilities reported today, including critical RCE in DeepSeek TUI and widespread access control failures in Open WebUI. Immediate patching recommended for AI agent frameworks.