AI Sec Watch

IBM Langflow OSS versions 1.0.0 through 1.11.5 contain a server-side request forgery vulnerability (SSRF, a flaw that lets attackers trick the server into making unauthorized requests on their behalf). An attacker without authentication could exploit this to probe the network or launch further attacks.

IBM Langflow OSS versions 1.0.0 through 1.11.2 contain a server-side request forgery vulnerability (SSRF, a flaw where an attacker tricks the server into making unwanted network requests). An authenticated attacker (someone with valid login credentials) could exploit this to send unauthorized requests from the system, potentially discovering network information or launching further attacks.

IBM Langflow OSS versions 1.0.0 through 1.10.2 have a server-side request forgery (SSRF, a vulnerability where an attacker tricks the server into making unintended requests to other systems) vulnerability that lets unauthenticated attackers send unauthorized requests from the affected system. This could be used to scan networks or set up follow-on attacks.

IBM Langflow OSS versions 1.0.0 through 1.11.5 has a security flaw where a logged-in attacker can view another user's MCP (Model Context Protocol, a system for connecting AI tools to external services) server settings because the cache key isolation (the method that keeps different users' data separate in temporary storage) is not working properly in the MCP Tools component.

Tract, a toolkit for running machine learning models (TensorFlow and ONNX inference, which means executing pre-trained AI models), has a vulnerability in how it handles tensor dimensions (the sizes of data arrays). Before versions 0.21.16, 0.22.2, and 0.23.1, an attacker could craft a malicious model file that tricks Tract into allocating a small amount of memory while actually trying to access a much larger area, potentially exposing nearby data in memory or crashing the program.

IBM Langflow OSS (an open-source tool for building AI applications) versions 1.0.0 through 1.10.2 has a security flaw where an attacker who is already logged into an account can change another user's password because the system doesn't properly verify who should be allowed to make that change. This allows unauthorized account takeovers for authenticated users.

NVIDIA CEO Jensen Huang took a speakerphone call from President Trump during an industry summit, where Trump dismissed concerns about AI safety as a "hoax" and stated that "robots will not be taking over." The call occurred amid broader debate in the AI industry about how quickly AI development should proceed, including a recent essay from Anthropic's CEO arguing for slower AI advancement.

China dismissed calls from Anthropic's CEO Dario Amodei for the US to block China's AI development as 'fearmongering,' while China's top spy official warned that advanced AI could threaten Communist party rule. Amodei had written that the US should both slow global AI progress and specifically prevent China from advancing in AI to maintain technological advantage.

AI lab leaders, including the CEOs of Anthropic, OpenAI, Google DeepMind, and SpaceX, have publicly called for slowing down the development of large language models (LLMs, which are AI systems trained on massive amounts of text data) because they worry about risks from cyberattacks, bioterrorism, and economic harm. However, the article notes it's unclear what these companies actually mean by a slowdown or how they would implement it, and suggests they may be using safety concerns partly to improve their public image ahead of potential investments.