AI
Breaking Wire
Content
Ecosystem
Community
Pricing
AI Vulnerability Database
916 vulnerabilities tracked — CVEs, prompt injection, model exploits.
HIGH
Malicious Code Execution via Poisoned Pickle Serialization in Community-Uploaded Models on Hugging Face Hub
Hugging Face Hub (community models)
Hugging Face Transformers < 4.40.0
20 Nov 2025
0 views
Unpatched
CRITICAL
CVE-2025-7359
Previous
Page 38 of 77
Next
NVIDIA Triton Inference Server Remote Code Execution via Malicious Model Configuration
NVIDIA Triton Inference Server < 2.58.0
20 Nov 2025
0 views
Patched
CRITICAL
Malicious PyPI Package 'torch-utility-lite' Steals Cloud Credentials and API Keys
Developer machines with the 'torch-utility-lite' PyPI package installed
20 Nov 2025
0 views
Patched
MEDIUM
Cross-Tenant Metadata Leak in AWS Bedrock via Model Customization Job API
AWS Bedrock
20 Nov 2025
0 views
Patched
HIGH
Data Exfiltration via Indirect Prompt Injection in Web-Browsing AI Agents
Various LLM-powered agents with web browsing capabilities
AI-integrated web browsers
Chatbots with document analysis features
20 Nov 2025
0 views
Unpatched
HIGH
Cross-Tenant Log Injection in AWS Bedrock Agents Leads to Sensitive Data Disclosure
AWS Bedrock Agents
20 Nov 2025
0 views
Patched
HIGH
Data Exfiltration via Indirect Prompt Injection in AI Email Assistants
AI-powered email assistants
LLM-based agents that process untrusted external data (e.g., web pages, documents)
20 Nov 2025
0 views
Unpatched
HIGH
SSRF in Azure OpenAI "On Your Data" Feature Exposes Internal Metadata Services
Azure OpenAI Service
20 Nov 2025
0 views
Patched
MEDIUM
GitHub Copilot Workspace Suggestion Poisoning via Obfuscated Semantic Context
GitHub Copilot (all versions with workspace context)
20 Nov 2025
0 views
Unpatched
CRITICAL
CVE-2025-59102
NVIDIA CUDA Driver Use-After-Free Allows GPU Memory Evasion and Host Privilege Escalation
NVIDIA Linux Driver 550.x < 550.78
NVIDIA Windows Driver 551.x < 551.23
20 Nov 2025
0 views
Patched
HIGH
Data Exfiltration via Indirect Prompt Injection in Web-Browsing AI Assistants
AI assistants with web-browsing tools
Systems using Retrieval-Augmented Generation (RAG) on untrusted data sources
20 Nov 2025
0 views
Unpatched
MEDIUM
Cross-Tenant Log Data Exposure in Azure OpenAI Service via In-Band Telemetry Injection
Microsoft Azure OpenAI Service
20 Nov 2025
0 views
Patched