Articles
Daily digests summarizing the vulnerabilities and incidents tracked by VulnWatch.
-
· 33 entries · daily · Subscribers only
VulnWatch Daily: Critical Agent Escapes and Platform Instability Surge
33 new vulnerabilities reported today, including critical RCE in Langroid and Crawl4AI, plus extensive authentication flaws in Coder. Immediate patching recommended for AI inference and agent frameworks.
-
· 79 entries · weekly
VulnWatch Weekly: Langflow Cascade & MCP Ecosystem Risks
Langflow faces a critical week with 10+ CVEs including RCE and secret leakage. MCP servers show systemic auth flaws. Action required on model loading.
-
· 10 entries · daily · Subscribers only
VulnWatch Daily: MCP Servers Face Injection Risks; Triton DoS Patched
Today's digest highlights critical injection flaws in Model Context Protocol servers, alongside denial-of-service vectors in NVIDIA Triton and supply-chain risks in AI development tools.
-
· 120 entries · weekly
VulnWatch Weekly: PraisonAI Auth Collapse & MCP Server Exposure
This week saw a cascade of critical vulnerabilities in PraisonAI agents and widespread authentication failures in Model Context Protocol servers. Oracle Coherence and Langflow also shipped critical RCEs requiring immediate patching.
-
· 28 entries · daily · Subscribers only
VulnWatch Daily: MCP Server Risks Surge & Langflow Critical Flaws
28 new vulnerabilities reported today, highlighting critical risks in Model Context Protocol servers, Langflow platform integrity, and supply chain attacks via model loading.
-
· 52 entries · weekly
MCP Meltdown & Flowise Flood: Critical AI Infra Vulnerabilities Surge
Critical MCP auth bypasses and Flowise RCEs dominate this week. LiteLLM command injection is actively exploited. ChromaDB and vLLM also ship high-severity patches. Immediate action required on agent frameworks.
-
· 9 entries · daily · Subscribers only
VulnWatch Daily: Critical MCP Flaws & ML Framework Risks (2026-06-11)
Nine new vulnerabilities reported today, including critical authentication bypasses in Model Context Protocol servers and resource exhaustion risks in vLLM. Immediate patching recommended for MCP integrations and Keras pipelines.
-
· 102 entries · weekly
VulnWatch Weekly: MCP Security Crisis & Model Loading RCE Surge
This week exposes critical risks in Model Context Protocol implementations, unsafe model deserialization in PyTorch/Diffusers, and agentic RCE chains. Immediate patching required for SOCFortress, ART, and Open WebUI.
-
· 41 entries · daily · Subscribers only
VulnWatch Daily: Critical Agent RCE and Open WebUI Access Control Flaws
41 new vulnerabilities reported today, including critical RCE in DeepSeek TUI and widespread access control failures in Open WebUI. Immediate patching recommended for AI agent frameworks.
-
· 99 entries · weekly
VulnWatch Weekly: Agentic RCE Surge & LiteLLM Exploitation
Critical RCEs plague agent platforms like FastGPT and PraisonAI. LiteLLM SQLi is actively exploited. Supply chain risks rise with PyTorch Lightning compromise.
-
· 11 entries · daily · Subscribers only
VulnWatch Daily: Critical Agent RCE and Multi-Tenant Isolation Failures
Eleven new vulnerabilities impact AI infrastructure today, including critical RCE in PraisonAI and multi-tenant isolation bugs in Axonflow. Immediate patching is recommended for model serving and agent frameworks.