AI
Breaking Wire
Content
Ecosystem
Community
Pricing
AI Vulnerability Database
490 vulnerabilities tracked — CVEs, prompt injection, model exploits.
CRITICAL
Cross-Tenant Model Poisoning in GCP Vertex AI via Insecure Custom Training Job Handling
GCP Vertex AI
22 Jan 2026
10 views
Patched
HIGH
Indirect Prompt Injection in AI Agents via Web Content Leads to Data Exfiltration
Microsoft Bing Chat (Copilot)
Previous
Page 29 of 41
Next
Google Gemini (formerly Bard)
ChatGPT (with browsing)
LangChain Agents (with web browsing tools)
10 Feb 2025
8 views
Unpatched
HIGH
CVE-2023-25515
NVIDIA GPU Display Driver Out-of-Bounds Write Leading to Privilege Escalation
NVIDIA GPU Display Driver (Windows) < 531.41
NVIDIA GPU Display Driver (Linux) < 525.85.05
1 Aug 2025
8 views
Patched
CRITICAL
Arbitrary Code Execution via Maliciously Crafted Models on Hugging Face Hub
huggingface-hub (all versions)
transformers (all versions loading .bin files)
20 June 2025
8 views
Unpatched
CRITICAL
CVE-2023-29374
Remote Code Execution in LangChain PALChain via Crafted Mathematical Prompts
langchain < 0.0.171
28 May 2025
10 views
Patched
HIGH
Data Exfiltration via Obfuscated Markdown Image Rendering in LLM-Powered Chatbots
GitHub Copilot Chat
Cursor IDE
Any LLM agent with file system access and Markdown rendering capabilities
5 Nov 2025
1 views
Unpatched
HIGH
Cross-Tenant Data Leakage in AWS Bedrock via Model Customization Job Cache Poisoning
AWS Bedrock
30 July 2025
10 views
Patched
CRITICAL
CVE-2025-10743
NVIDIA CUDA Driver Use-After-Free Vulnerability Allows GPU Container Escape to Host System
NVIDIA GPU Driver < 550.54.14 (Linux)
NVIDIA GPU Driver < 551.78 (Windows)
18 Feb 2026
8 views
Patched
CRITICAL
Malicious Safetensors Model on Hugging Face Hub Executes Remote Code via Custom Operator Deserialization
PyTorch >= 2.0
Hugging Face Transformers >= 4.30.0
Diffusers >= 0.20.0
22 Sept 2025
51 views
Unpatched
CRITICAL
Indirect Prompt Injection in LangChain SQLDatabaseChain Leads to SQL Injection and Data Exfiltration
LangChain 0.1.x
LangChain 0.2.x
15 Apr 2025
5 views
Patched
CRITICAL
CVE-2025-23415
Server-Side Request Forgery (SSRF) in Azure AI Services Leading to Internal Metadata Exposure
Azure AI Search
Azure Machine Learning
1 Aug 2025
8 views
Patched
HIGH
CVE-2026-11221
NVIDIA GPU Driver Out-of-Bounds Write Allowing Privilege Escalation in Multi-Tenant Environments
NVIDIA Linux GPU Driver R550 < 550.78
NVIDIA Linux GPU Driver R535 < 535.171.04
Kubernetes clusters with GPU nodes
18 Feb 2026
8 views
Patched