Articles
Daily digests summarizing the vulnerabilities and incidents tracked by VulnWatch.
-
· 120 entries · weekly
VulnWatch Weekly: Agentic RCE Epidemic & vLLM DoS Storm
This week saw a surge in critical agentic vulnerabilities allowing unauthenticated RCE via shell tools. Simultaneously, vLLM faced a wave of DoS vectors targeting multimodal processors.
-
· 31 entries · daily · Subscribers only
VulnWatch Digest: Critical RCE in Agentic Frameworks and A2A Protocol Flaws
Today's digest highlights critical remote code execution vulnerabilities in Langchain-Chatchat and piflow, alongside a wave of authentication and data leakage issues in the emerging Agent2Agent (A2A) protocol stack.
-
· 120 entries · weekly
VulnWatch Weekly: The Week of Mass RCE in AI Agents and Orchestration
This week saw an unprecedented wave of Critical RCEs in AI orchestration tools like Langflow and PraisonAI, driven by unsandboxed code execution and prompt injection. Immediate patching is required for agent platforms, MCP servers, and model inference engines to prevent total host compromise.
-
· 45 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in SGLang, Ollama, and PraisonAI Agent Ecosystem
October 8, 2026: A wave of critical vulnerabilities exposes AI infrastructure to remote code execution. SGLang, Ollama, and the PraisonAI framework face severe flaws allowing unauthenticated access, secret exfiltration, and full system compromise via prompt injection and deserialization bugs.
-
· 120 entries · weekly
VulnWatch Weekly: MCP Servers Under Siege, LLM RCE via Pickle
This week's digest highlights a critical wave of vulnerabilities in Model Context Protocol (MCP) servers, featuring unauthenticated RCEs, SSRF chains, and token theft. We also cover severe pickle deserialization flaws in LLM serving stacks like LMDeploy and vLLM.
-
· 20 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in LMDeploy, MCP Auth Bypasses, and vLLM DoS
Today's digest highlights a critical pickle deserialization RCE in LMDeploy, unauthenticated file reads in MCP servers leading to token theft, and multiple denial-of-service vectors in vLLM and Chroma affecting multi-tenant isolation.
-
· 89 entries · weekly
VulnWatch Weekly: The Agentic Apocalypse & The Langflow Meltdown
This week marks a turning point for AI security as critical RCEs plague agentic frameworks like Mistral Vibe and Langflow. With 89 new entries, the dominant theme is the collapse of trust boundaries in autonomous agents and model serving pipelines.
-
· 5 entries · daily · Subscribers only
VulnWatch Daily: Critical MCP RCEs and Supply Chain Risks in AI Agents
Today's digest highlights critical Remote Code Execution flaws in Model Context Protocol servers, including command injection in AWS tools and package alias abuse. We also cover data leakage in Nuxt Ollama and DoS vectors in Kotlin SDKs and TOML parsers affecting AI agents.
-
· 93 entries · weekly
VulnWatch Weekly: The MCP Security Crisis & Langflow RCE
This week marks a turning point for AI security with critical RCEs in Langflow and a systemic collapse of authentication in the Model Context Protocol (MCP) ecosystem. Immediate patching is required for Kubeflow, Langflow, and all exposed MCP servers.
-
· 46 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE and Auth Bypasses in MCP Ecosystem
August 25, 2026: A surge of critical vulnerabilities targets the Model Context Protocol (MCP) ecosystem, featuring unauthenticated RCE via command injection, unsafe math parsing, and widespread authentication bypasses in agentic frameworks.
-
· 33 entries · daily · Subscribers only
VulnWatch Daily: Critical Agent Escapes and Platform Instability Surge
33 new vulnerabilities reported today, including critical RCE in Langroid and Crawl4AI, plus extensive authentication flaws in Coder. Immediate patching recommended for AI inference and agent frameworks.
-
· 79 entries · weekly
VulnWatch Weekly: Langflow Cascade & MCP Ecosystem Risks
Langflow faces a critical week with 10+ CVEs including RCE and secret leakage. MCP servers show systemic auth flaws. Action required on model loading.
-
· 10 entries · daily · Subscribers only
VulnWatch Daily: MCP Servers Face Injection Risks; Triton DoS Patched
Today's digest highlights critical injection flaws in Model Context Protocol servers, alongside denial-of-service vectors in NVIDIA Triton and supply-chain risks in AI development tools.
-
· 120 entries · weekly
VulnWatch Weekly: PraisonAI Auth Collapse & MCP Server Exposure
This week saw a cascade of critical vulnerabilities in PraisonAI agents and widespread authentication failures in Model Context Protocol servers. Oracle Coherence and Langflow also shipped critical RCEs requiring immediate patching.
-
· 28 entries · daily · Subscribers only
VulnWatch Daily: MCP Server Risks Surge & Langflow Critical Flaws
28 new vulnerabilities reported today, highlighting critical risks in Model Context Protocol servers, Langflow platform integrity, and supply chain attacks via model loading.