AI
Breaking Wire
Content
Ecosystem
Community
Pricing
AI Vulnerability Database
490 vulnerabilities tracked — CVEs, prompt injection, model exploits.
CRITICAL
CVE-2025-45881
PyPI Supply Chain Attack 'ML-Leaker' Steals Cloud Credentials from AI Developers
PyPI (Python Package Index) ecosystem
Python developer environments
10 Aug 2025
1 views
Patched
CRITICAL
Remote Code Execution in LangChain Agents via Unsandboxed Python REPL Tool
Previous
Page 12 of 41
Next
LangChain >=0.1.0
AutoGPT (all versions using unsandboxed execution)
15 Feb 2025
0 views
Unpatched
HIGH
Indirect Prompt Injection in GitHub Copilot Workspace via Malicious Markdown Files
GitHub Copilot (versions with workspace indexing prior to Q3 2025 patches)
Cursor IDE (all versions before 0.28.0)
20 May 2025
0 views
Patched
CRITICAL
CVE-2025-13370
Cross-Tenant Data Exfiltration in a Major Cloud AI Service via Model Training Cache Poisoning
GCP Vertex AI Training
AWS SageMaker
Azure Machine Learning
10 Jan 2026
1 views
Patched
HIGH
Indirect Prompt Injection in GitHub Copilot via Malicious Open Source Repository Content
GitHub Copilot (VS Code extension)
GitHub Copilot (JetBrains extension)
Other context-aware AI coding assistants
19 Feb 2026
0 views
Unpatched
HIGH
CVE-2024-0090
NVIDIA CUDA Driver Kernel Mode Handler Vulnerability Allows Privilege Escalation in Multi-Tenant GPU Environments
NVIDIA GPU Driver for Linux (versions before 550.90.07)
NVIDIA GPU Driver for Windows (versions before 552.61)
5 Nov 2025
0 views
Patched
CRITICAL
Malicious PyPI Package `torch-optimizer` Steals Cloud and Git Credentials from AI/ML Environments
Python developer environments
CI/CD pipelines for AI/ML projects
22 July 2025
0 views
Unpatched
CRITICAL
CVE-2023-44467
Remote Code Execution in LangChain Experimental Chains via Unsanitized LLM Output
LangChain < 0.1.18
15 Apr 2025
0 views
Patched
CRITICAL
Malicious Pickle File Upload on Hugging Face Hub Leads to Platform RCE
Hugging Face Hub Platform
22 Jan 2026
1 views
Patched
HIGH
CVE-2024-0077
Path Traversal in NVIDIA Triton Inference Server Allows Unauthorized Model Overwrite
NVIDIA Triton Inference Server < 24.01
12 Nov 2025
2 views
Patched
CRITICAL
CVE-2023-49080
Malicious `torchtriton` PyPI Package Steals Credentials from AI Developers
Python developer environments
CI/CD build servers
1 Aug 2025
0 views
Patched
HIGH
Indirect Prompt Injection in AI Email Assistants via Third-Party Content Retrieval
AI Email Assistants
AI Agents with Web Browsing Tools
Retrieval-Augmented Generation (RAG) Systems
20 May 2025
1 views
Unpatched