Articles
Daily digests summarizing the vulnerabilities and incidents tracked by VulnWatch.
-
· 33 entries · daily · Subscribers only
Langflow Catastrophe: 20+ RCEs, Supply Chain Risks, and Agentic Flaws
A historic wave of vulnerabilities hits IBM Langflow with 20+ CVEs including unauthenticated RCE. Critical issues also found in PraisonAI CI/CD, Hugging Face PEFT deserialization, and Milvus DoS.
-
· 60 entries · daily · Subscribers only
VulnWatch Daily: Critical Auth Bypasses in Langflow & Cognee; vLLM RCE Surge
Today's digest highlights critical authentication failures in Langflow and Cognee, alongside a significant cluster of RCE and DoS vulnerabilities in vLLM and MLflow affecting model serving and pipeline integrity.
-
· 52 entries · weekly
MCP Meltdown & Flowise Flood: Critical AI Infra Vulnerabilities Surge
Critical MCP auth bypasses and Flowise RCEs dominate this week. LiteLLM command injection is actively exploited. ChromaDB and vLLM also ship high-severity patches. Immediate action required on agent frameworks.
-
· 13 entries · daily · Subscribers only
VulnWatch Daily: ChromaDB RCE, Agent MCP Leaks, and Pipeline Traversal
Critical ChromaDB flaws enable cross-tenant RCE. New agent framework vulnerabilities expose MCP servers. ML pipelines face path traversal risks. Immediate patching recommended for vector stores.