AI
Breaking Wire
Content
Ecosystem
Community
Pricing
AI Vulnerability Database
911 vulnerabilities tracked — CVEs, prompt injection, model exploits.
CRITICAL
CVE-2026-30557
Remote Code Execution in LangChain via Insecure Parsing of Agent Tool Output
LangChain < 0.2.15
LangChain Python library
2 June 2026
10 views
Patched
CRITICAL
Trojaned Code-Generation Model on Hugging Face Hub Enables Remote Access Backdoor
Previous
Page 15 of 76
Next
Hugging Face Hub model: `CodeGen-Pro-v3-tuned` (fictional example name)
31 May 2026
0 views
Unpatched
HIGH
CVE-2024-0078
Path Traversal in NVIDIA Triton Inference Server Model Repository Allows Arbitrary File Read
NVIDIA Triton Inference Server < 2.45.0
30 May 2026
1 views
Patched
HIGH
CVE-2026-10892
Unauthenticated Model Management API Exposure in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server (all versions before 2.45.0)
28 May 2026
0 views
Patched
HIGH
CVE-2026-28581
Container Escape via Malformed GPU Device Request in NVIDIA Container Toolkit
nvidia-container-toolkit < 1.15.2
libnvidia-container < 1.15.1
28 May 2026
0 views
Patched
CRITICAL
Cross-Tenant IAM Role Assumption Vulnerability in AWS Bedrock Agents
AWS Bedrock Agents
28 May 2026
0 views
Patched
CRITICAL
CVE-2026-28113
Remote Code Execution in LangChain's PythonREPLTool via Unsanitized LLM Output
langchain < 0.2.5
langchain-experimental
28 May 2026
0 views
Patched
CRITICAL
Malicious PyPI Package 'torch-utils' Steals Cloud Credentials and Model Weights
Developer environments with `torch-utils` package installed
28 May 2026
0 views
Patched
HIGH
CVE-2026-31415
GitHub Copilot Workspace Context Vulnerability Allows Environment Variable Exfiltration
GitHub Copilot for VS Code < 1.195.0
28 May 2026
0 views
Patched
HIGH
Cross-Tenant Data Leakage in AWS Bedrock Agents via Service-Side Request Forgery in Tool Definition
AWS Bedrock Agents
28 May 2026
0 views
Patched
CRITICAL
Remote Code Execution in LangChain SQLDatabaseChain via Unsafe Python exec
langchain <0.2.15
langchain-experimental <0.0.60
28 May 2026
0 views
Patched
HIGH
CVE-2026-11298
Server-Side Request Forgery (SSRF) in AWS Bedrock Agent Data Sources
AWS Bedrock Agents
28 May 2026
0 views
Patched