AI Sec Watch

CVE-2026-65675 is a vulnerability in Visual Studio Code's CoPilot Chat Extension that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability has not yet been assigned a complete severity rating or detailed weakness classification by NIST.

Intel's Extension for PyTorch before version 2.8.0 has a vulnerability involving deserialization of untrusted data (processing data from unverified sources without proper validation), which could allow a local user to gain higher privileges on a system. An attacker would need local access and the user to interact with the software, but the actual security impact on the system is expected to be low.

A security flaw in vLLM Hardware Plugin for Intel Gaudi software versions before 0.16.0 fails to properly validate user input (check that data is safe before using it), which could allow an authorized user to crash the system through a denial of service attack (making a service unavailable). The flaw affects system availability but not the security of stored data or system integrity.

Intel's oneCCL Bindings for PyTorch (a library that helps PyTorch run on Intel hardware) versions before v2.8.0 have a flaw in their protection mechanism that could let an unprivileged user gain elevated privileges (privilege escalation, meaning gaining admin-level access they shouldn't have). An attacker could exploit this through local access with minimal effort and some basic user interaction.

A protection mechanism failure exists in Intel's LLM Library for PyTorch (a software tool for building machine learning models) that could allow an unprivileged user to gain higher system privileges through a local attack. The vulnerability requires the attacker to have some access to the system and could potentially compromise the confidentiality, integrity, and availability of affected systems.

A protection mechanism failure in Intel Extension for TensorFlow (a library that adds TensorFlow AI capabilities to Intel systems) before version 2.15.0.3 could allow someone with basic system access to gain higher-level privileges, potentially compromising the confidentiality, integrity, and availability of the system. The attack requires local access and low complexity, with passive user interaction.

Researchers discovered a critical vulnerability chain in Microsoft SharePoint on-premises servers that allows attackers without valid credentials to gain administrative access and run malicious code. The flaw was found partly through an AI agent that performed automated code analysis, chaining together two vulnerabilities (CVE-2026-55040 with CVSS 9.1 and CVE-2026-63520 with CVSS 8.1, a rating system measuring vulnerability severity) in SharePoint's authentication and service systems. The attack affects SharePoint Server Subscription Edition, 2019, and 2016, but not the cloud-based SharePoint Online.

Apple is developing a feature for iOS 27 that can verify when photos were taken on an iPhone by embedding provenance metadata (hidden information about the photo's origin and creation method) into images at the moment they're captured. This would let users prove their photos are authentic and not AI-generated deepfakes (synthetic media made to look real).

Sub2API is a platform that manages API access (the ability to use AI services) by distributing shared accounts across multiple users. In versions 0.1.135 to 0.1.168, an authenticated user could manipulate the URL path to send requests to unintended servers using the platform's shared account credentials, because the system didn't validate where requests were being sent. This vulnerability was caused by path traversal (exploiting how the system handles file/URL paths without checking them).