Articles
Daily digests summarizing the vulnerabilities and incidents tracked by VulnWatch.
-
· 38 entries · daily · Subscribers only
VulnWatch Daily: Critical RCE in llama.cpp, MCP Ecosystem Compromised, and vLLM DoS Vectors
Today's digest highlights a critical stack overflow in llama.cpp's RDMA transport, widespread authorization failures in Model Context Protocol (MCP) servers, and multiple denial-of-service vectors in vLLM. Immediate patching is required for distributed inference clusters and agentic platforms.
-
· 80 entries · weekly
VulnWatch Weekly: Agentic RCE, MCP Supply Chain, and Model DoS Surge
This week saw a critical surge in agentic vulnerabilities, with CVE-2026-96620 enabling RCE in Claude Agent SDK and deep flaws in MCP servers. Model serving stacks like SGLang and vLLM faced severe DoS vectors, while supply-chain risks in Podman and DeepSeek demand immediate patching.
-
· 23 entries · daily · Subscribers only
VulnWatch Daily: Critical MCP Flaws and SGLang DoS Waves
Today's digest highlights critical authorization bypasses in Model Context Protocol servers, a cascade of denial-of-service vectors in SGLang, and severe prompt-injection risks in agentic frameworks.
-
· 120 entries · weekly
VulnWatch Weekly: The Week of Mass RCE in AI Agents and Orchestration
This week saw an unprecedented wave of Critical RCEs in AI orchestration tools like Langflow and PraisonAI, driven by unsandboxed code execution and prompt injection. Immediate patching is required for agent platforms, MCP servers, and model inference engines to prevent total host compromise.
-
· 40 entries · daily · Subscribers only
VulnWatch Daily: Langflow RCE Flood, MCP Protocol Flaws, and Agent Injection Risks
A critical surge in Langflow vulnerabilities exposes AI orchestration platforms to remote code execution. New findings also highlight severe risks in Model Context Protocol implementations and agent webhook authentication.
-
· 44 entries · daily · Subscribers only
VulnWatch Daily: Langflow RCE Storm, vLLM DoS Vectors, and Docling Supply Chain Risks
A catastrophic cluster of vulnerabilities in Langflow enables trivial RCE via MCP and webhook bypasses. Simultaneously, vLLM faces multiple DoS vectors, and Docling exhibits supply chain and template injection flaws requiring immediate attention.
-
· 120 entries · weekly
VulnWatch Weekly: The MCP Authentication Crisis & Decepticon's Role Forgery
This week's digest highlights a catastrophic wave of authentication bypasses in Model Context Protocol (MCP) servers, led by critical flaws in mcp-atlassian. We also analyze 'Decepticon,' a new prompt injection vector enabling role-boundary forgery via ChatML literals.
-
· 14 entries · daily · Subscribers only
VulnWatch Daily: Critical Prompt Injection in Decepticon & MCP Server Flaws
Today's digest highlights a CVSS 10.0 prompt injection in Decepticon allowing role-boundary forgery, alongside critical DNS rebinding and auth-bypass flaws in DBHub and Cline MCP servers.
-
· 89 entries · weekly
VulnWatch Weekly: The Agentic Apocalypse & The Langflow Meltdown
This week marks a turning point for AI security as critical RCEs plague agentic frameworks like Mistral Vibe and Langflow. With 89 new entries, the dominant theme is the collapse of trust boundaries in autonomous agents and model serving pipelines.
-
· 17 entries · daily · Subscribers only
VulnWatch Daily: Critical GitPython RCE, DeepSeek Auth Bypass, and vLLM Data Leaks
Today's digest highlights a critical config corruption flaw in GitPython enabling RCE, an authentication bypass in DeepSeek Harness, and cross-user data leakage in vLLM inference kernels.
-
· 4 entries · daily · Subscribers only
VulnWatch Digest: RPC Assertions, GGUF Overflows, and Supply Chain Risks
Today's briefing covers critical integrity flaws in llama.cpp RPC servers, integer overflows in Ollama's GGUF decoder, and supply chain prompt injection risks in Elixir tooling.
-
· 98 entries · weekly
VulnWatch Weekly: The Week of Unsafe Eval, Agent RCE, and Active SSRF
This week's digest highlights a critical wave of Remote Code Execution (RCE) vulnerabilities in LLM inference servers, driven by unsafe deserialization and dynamic code evaluation. Most urgently, CISA has added an actively exploited MLflow SSRF flaw to its KEV catalog, demanding immediate patching for all exposed instances.
-
· 25 entries · daily · Subscribers only
VulnWatch Daily: Critical Agent Supply-Chain Poisoning and CodeWhale RCE
Today's digest highlights critical vulnerabilities in agentic workflows, including Kraken cache poisoning and CodeWhale auto-execution flaws. NVIDIA Triton and MONAI also require immediate attention for DoS and RCE risks.
-
· 68 entries · weekly
VulnWatch Weekly: Critical RCE in MindsDB & Agentic Supply Chain Risks
This week's digest highlights a CVSS 10.0 RCE in MindsDB allowing unauthenticated command execution via LLM prompts. We also analyze critical prototype pollution in Trigger.dev, template injection in Prompty, and widespread SSRF/RCE risks in the emerging Model Context Protocol (MCP) ecosystem.
-
· 6 entries · daily · Subscribers only
VulnWatch Daily: Critical File Reads in Firecrawl & Agent RCE in Goose
Today's digest covers critical vulnerabilities in AI data pipelines and agentic frameworks, including arbitrary file reads in Firecrawl, unauthorized file access in Flowise, and pre-prompt RCE in the Goose agent.