AI Sec Watch

Budibase's VectorDB configuration endpoint accepts a host parameter with no validation, allowing any authenticated builder-level user to make the server connect to internal IP addresses or cloud metadata endpoints (like AWS's 169.254.169.254). This is an SSRF vulnerability (server-side request forgery, where a server is tricked into making requests to unintended destinations), enabling attackers to scan internal networks, discover running services, and potentially steal cloud credentials.

Shadow AI (AI tools used by employees without IT approval or visibility) is becoming a major security risk because employees adopt AI faster than security teams can track, often on devices that traditional security tools can't monitor. Most organizations cannot see how many AI tools are in use, where they're being used, or what data is being shared with them, creating a dangerous gap between employee activity and security oversight.

ChromaDB Rust (version 1.0.0 and later) has a security flaw where authorization validation (checking whether a user has permission to access data) is missing, allowing any logged-in user to read, write, update, or delete data from any tenant's collection (a storage area for data), even if they shouldn't have access to it. This is rated as HIGH severity with a CVSS score (a 0-10 rating of how severe a vulnerability is) of 8.8.

ChromaDB (a Python database project) versions 0.4.17 and later have a code injection vulnerability (CVE-2026-45833) that allows an authenticated attacker (someone with valid login credentials) to run arbitrary code (malicious programs) on the server by sending a malicious model repository when a specific setting is enabled. This vulnerability has a CVSS score (a 0-10 rating of how severe a vulnerability is) of 9.4, meaning it is critical.

CVE-2026-45832 is a vulnerability in ChromaDB's Python project where V1 collection-level endpoints (API access points for managing data collections) pass None (empty/null values) for the tenant and database parameters to the authorization layer, allowing attackers with login credentials to bypass authorization controls (security checks that verify what users are allowed to do) by using these older endpoints. The vulnerability has a CVSS score (0-10 severity rating) of 8.8, indicating it is high-severity.

ChromaDB Python versions 0.5.0 and later contain a vulnerability in the SimpleRBACAuthorizationProvider (a tool that checks user permissions) where it verifies that a user has permission to do something but fails to check which tenant, database, or collection that permission applies to. This allows users to perform actions across different tenants (separate customer environments) that they shouldn't be able to access.

ChromaDB (a Python tool for managing data collections) version 0.4.17 and later has a security flaw where authorization validation (checking if a user should be allowed to access something) is missing. This allows any user who is already logged in to read, write, change, or delete data in any tenant's collection (a shared workspace), even if they shouldn't have access to it. The severity is rated as HIGH with a CVSS score of 8.8 (a 0-10 scale measuring how serious a vulnerability is).

LangGraph's MongoDBSaver had a NoSQL injection vulnerability (a type of attack where special database commands are sneaked into queries) that allowed attackers to read checkpoint data (saved conversation states) from other users or tenants by injecting MongoDB operators like $gt into identifier fields. This happened because the code didn't enforce that these fields must be strings before using them in database queries.

This paper addresses the challenge of training prohibited item detection models for X-ray security screening, which normally requires large amounts of manually collected and labeled images. The authors propose Xsyn, a one-stage synthetic image generation pipeline using text-to-image generation (a type of AI that creates images from text descriptions) that automatically creates realistic X-ray security images without requiring labor-intensive manual image extraction and annotation.