aisecwatch.com
DashboardVulnerabilitiesNewsResearchArchiveStatsDatasetFor devs
Subscribe
aisecwatch.com

Real-time AI security monitoring. Tracking AI-related vulnerabilities, safety and security incidents, privacy risks, research developments, and policy changes.

Navigation

VulnerabilitiesNewsResearchDigest ArchiveNewsletter ArchiveSubscribeData SourcesStatisticsDatasetAPIIntegrationsWidgetRSS Feed

Maintained by

Truong (Jack) Luu

Information Systems Researcher

AI Sec Watch

The security intelligence platform for AI teams

AI security threats move fast and get buried under hype and noise. Built by an Information Systems Security researcher to help security teams and developers stay ahead of vulnerabilities, privacy incidents, safety research, and policy developments.

Independent research. No sponsors, no paywalls, no conflicts of interest.

[TOTAL_TRACKED]
6,483
[LAST_24H]
33
[LAST_7D]
151
Daily BriefingTuesday, August 18, 2026
>

OpenAI Launches ChatGPT for Teens with Enhanced Safety Controls: OpenAI introduced a dedicated version of ChatGPT for users aged 13-17 with features including Study Mode (which prompts students to work through problems rather than providing direct answers), human-reviewed parental alerts for harmful requests like eating disorder content, and options to disable human-like voice responses. The rollout comes amid growing pressure on AI platforms to implement age verification and youth-specific protections.

>

LLMs Leak Sensitive Data When Using Persistent Memory: Research found that frontier LLMs (the most advanced current systems) inappropriately share private details from past conversations at rates up to 69% attribute-level violations, even when explicitly instructed to protect privacy. The findings reveal that models struggle to make context-appropriate decisions about what information to share, tending to either overshare or withhold everything rather than apply nuanced judgment.

Latest Intel

page 494/649
VIEW ALL
01

The Next Frontier of Runtime Assembly Attacks: Leveraging LLMs to Generate Phishing JavaScript in Real Time

securityresearch
Critical This Week5 issues
critical

GHSA-7gwp-5pfp-969j: MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

CVE-2026-64849GitHub Advisory DatabaseAug 17, 2026
Aug 17, 2026
>

AI Excels at Finding Zero-Days but Doubles Security Flaw Rates in Generated Code: While LLMs demonstrate growing capability in discovering zero-day vulnerabilities (previously unknown security flaws) and building exploits, AI-generated code contains security weaknesses at roughly twice the rate of human-written code, with 44% containing at least one OWASP Top 10 vulnerability (the most critical categories of code weaknesses). Despite 99% syntax correctness, the asymmetry between AI's offensive and defensive security capabilities remains unexplained.

Jan 22, 2026

Attackers can use large language models (LLMs, AI systems trained on vast amounts of text to generate human-like responses) to create phishing pages that appear safe at first but transform into malicious sites after a victim visits them. The attack works by having a webpage secretly request the LLM to generate malicious JavaScript (code that runs in web browsers) using carefully crafted prompts that trick the AI into ignoring its safety rules, then assembling and running this code inside the victim's browser in real time. Because the malicious code is generated fresh each time and comes from trusted AI services, it bypasses traditional network security checks.

Fix: The source explicitly recommends runtime behavioral analysis to detect and block malicious activity at the point of execution within the browser. Palo Alto Networks customers are advised to use Advanced URL Filtering, Prisma AIRS, and Prisma Browser with Advanced Web Protection. Organizations are also encouraged to use the Unit 42 AI Security Assessment to help ensure safe AI use and development.

Palo Alto Unit 42
02

CVE-2026-24055: Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/sla

security
Jan 21, 2026

Langfuse versions 3.146.0 and earlier have a security flaw in the Slack integration endpoint that doesn't properly verify users before connecting their Slack workspace to a project. An attacker can exploit this to connect their own Slack workspace to any project without permission, potentially gaining access to prompt changes or replacing automation integrations (configurations that automatically perform tasks when triggered). This vulnerability affects the Prompt Management feature, which stores AI prompts that can be modified.

Fix: This issue has been fixed in version 3.147.0.

NVD/CVE Database
03

CVE-2026-22807: vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to versio

security
Jan 21, 2026

vLLM (a system for running and serving large language models) had a security flaw in versions 0.10.1 through 0.13.x where it automatically loaded code from model repositories without checking if that code was trustworthy, allowing attackers to run malicious Python commands on the server when a model loads. This vulnerability doesn't require the attacker to have access to the API or send requests; they just need to control which model repository vLLM tries to load from.

Fix: Upgrade to vLLM version 0.14.0, which fixes this issue.

NVD/CVE Database
04

CVE-2026-21852: Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed

security
Jan 21, 2026

Claude Code (an agentic coding tool, meaning an AI that can write and modify code) had a vulnerability before version 2.0.65 where malicious code repositories could steal users' API keys (secret authentication tokens). An attacker could hide a settings file in a repository that redirects API requests to their own server, and Claude Code would send the user's API key there before showing a trust confirmation prompt.

Fix: Update Claude Code to version 2.0.65 or later. The source states: 'Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to version 2.0.65, which contains a patch, or to the latest version.'

NVD/CVE Database
05

CVE-2025-66960: An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function rea

security
Jan 21, 2026

CVE-2025-66960 is a vulnerability in Ollama v.0.12.10 where a remote attacker can cause a denial of service (making a service unavailable by overwhelming it) by sending malicious GGUF metadata (a file format used in machine learning). The issue is in the readGGUFV1String function, which reads string length data from untrusted sources without properly validating it.

NVD/CVE Database
06

CVE-2025-66959: An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder

security
Jan 21, 2026

CVE-2025-66959 is a vulnerability in ollama v.0.12.10 that allows a remote attacker to cause a denial of service (making a service unavailable by overwhelming it) through the GGUF decoder (the part of the software that reads GGUF format files). The vulnerability stems from improper input validation and uncontrolled resource consumption in how the decoder processes data.

NVD/CVE Database
07

Copyright Kills Competition

policy
Jan 21, 2026

The article argues that stronger copyright laws, often promoted as protecting creators from big tech, actually concentrate power among large corporations and create barriers that prevent competition and innovation. In the AI context specifically, requiring developers to license training data would be so expensive that only the largest companies could afford to build AI models, reducing competition and ultimately harming consumers through higher costs and worse services.

EFF Deeplinks Blog
08

CVE-2025-69285: SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.5.0 contain a mi

security
Jan 21, 2026

SQLBot is a data query system that uses a large language model and RAG (retrieval-augmented generation, where an AI pulls in external documents to answer questions) to help users query databases. Versions before 1.5.0 have a missing authentication vulnerability in a file upload endpoint that allows attackers without login credentials to upload Excel or CSV files and insert data directly into the database, because the endpoint was added to a whitelist that skips security checks.

Fix: Update to version 1.5.0 or later, where the vulnerability has been fixed.

NVD/CVE Database
09

v0.14.13

security
Jan 21, 2026

LlamaIndex version 0.14.13 is a release that includes multiple updates across its core library and integrations, featuring new capabilities like early stopping in agent workflows, token-based code splitting, and distributed data ingestion via RayIngestionPipeline. The release also includes several bug fixes, such as correcting error handling in aggregation functions and fixing async integration issues, plus security improvements that removed exposed API keys from notebook outputs.

LlamaIndex Security Releases
10

Generative Artificial Intelligence for Knowledge-Driven Industries: Leveraging Collective Intelligence to Address Discourse Patterns and Sectoral Diffusion

research
Jan 21, 2026

This research analyzes how discussions about Generative AI spread across different industries (like media, healthcare, and finance) in the six months after ChatGPT's release, using social media data and innovation theory. The study found that different industries had different concerns: media and marketing focused on content generation with positive views, while healthcare and finance were more cautious and focused on analysis. Misinformation was the biggest concern overall, and the research showed that emotional reactions (sentiment) were the main factor driving how quickly information about AI spread between people.

AIS eLibrary (Journal of AIS, CAIS, etc.)
Prev1...492493494495496...649Next
critical

CVE-2026-75110: MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=

CVE-2026-75110NVD/CVE DatabaseAug 17, 2026
Aug 17, 2026
critical

CVE-2026-64859: New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-

CVE-2026-64859NVD/CVE DatabaseAug 17, 2026
Aug 17, 2026
critical

CVE-2025-27772: UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `

CVE-2025-27772NVD/CVE DatabaseAug 17, 2026
Aug 17, 2026
critical

CVE-2025-27771: UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `

CVE-2025-27771NVD/CVE DatabaseAug 17, 2026
Aug 17, 2026