What changed in AI security, Aug 4 to Aug 10, 2025
Aug 4 to Aug 10, 2025 (ISO week 2025-W32). Weeks run Monday to Sunday in UTC.
36 records published, +19 on the previous week: 28 vulnerabilities (+19), 0 incidents (no change), 0 research items (-1), 8 news items (+4), 0 policy items (-3).
Critical and high advisories
Vulnerability records rated critical or high, newest first.- High
CVE-2025-54886: skops Card.get_model arbitrary code execution through joblib fallback
CVE-2025-54886NVD/CVE Database - Critical
CVE-2025-53767: Azure OpenAI Elevation of Privilege Vulnerability
CVE-2025-53767NVD/CVE Database - High
CVE-2025-53787: Microsoft 365 Copilot BizChat information disclosure vulnerability
CVE-2025-53787NVD/CVE Database - High
CVE-2025-23331: NVIDIA Triton Inference Server memory allocation flaw via invalid request
CVE-2025-23331NVD/CVE Database - High
CVE-2025-23327: NVIDIA Triton Inference Server integer overflow via crafted inputs
CVE-2025-23327NVD/CVE Database - High
CVE-2025-23326: NVIDIA Triton Inference Server integer overflow via crafted input
CVE-2025-23326NVD/CVE Database - High
CVE-2025-23325: NVIDIA Triton Inference Server uncontrolled recursion via crafted input
CVE-2025-23325NVD/CVE Database - High
CVE-2025-23324: NVIDIA Triton Inference Server integer overflow via invalid request
CVE-2025-23324NVD/CVE Database - High
CVE-2025-23323: NVIDIA Triton Inference Server integer overflow from invalid request
CVE-2025-23323NVD/CVE Database - High
CVE-2025-23322: NVIDIA Triton Inference Server double free when stream is cancelled
CVE-2025-23322NVD/CVE Database - High
CVE-2025-23321: NVIDIA Triton Inference Server divide by zero from invalid request
CVE-2025-23321NVD/CVE Database - High
CVE-2025-23320: NVIDIA Triton Inference Server Python backend shared memory limit exceeded
CVE-2025-23320NVD/CVE Database - High
CVE-2025-23319: NVIDIA Triton Inference Server Python backend out-of-bounds write via request
CVE-2025-23319NVD/CVE Database - High
CVE-2025-23318: NVIDIA Triton Inference Server Python backend out-of-bounds write
CVE-2025-23318NVD/CVE Database - Critical
CVE-2025-23317: NVIDIA Triton Inference Server HTTP server reverse shell via crafted request
CVE-2025-23317NVD/CVE Database - Critical
CVE-2025-23311: NVIDIA Triton Inference Server stack overflow through crafted HTTP requests
CVE-2025-23311NVD/CVE Database - Critical
CVE-2025-23310: NVIDIA Triton Inference Server stack buffer overflow from crafted inputs
CVE-2025-23310NVD/CVE Database - High
CVE-2025-54868: LibreChat exposed testing endpoint allows reading arbitrary chats
CVE-2025-54868NVD/CVE Database - Critical
CVE-2025-54795: Claude Code command parsing flaw bypasses confirmation prompt
CVE-2025-54795NVD/CVE Database - Critical
CVE-2025-54794: Claude Code path validation flaw exposes files outside working directory
CVE-2025-54794NVD/CVE Database - High
CVE-2025-54135: Cursor writes in-workspace files without user approval
CVE-2025-54135NVD/CVE Database - High
CVE-2025-54130: Cursor writes in-workspace files without user approval
CVE-2025-54130NVD/CVE Database
Exploitation signals
Vulnerabilities published in the week that are listed in the CISA Known Exploited Vulnerabilities catalog or have an EPSS score of 10% or more.No vulnerability published in this week is listed as exploited or has an EPSS score of 10% or more.
Packages that began delegating to a language model
Exposure Registry packages whose first release declaring an LLM SDK, agent framework or MCP dependency was published in the week.No tracked package published its first release with an LLM SDK, agent framework or MCP dependency in this week.
Topics that moved
Largest increases over the mean of the 4 previous weeks, for topics with at least 3 records in the week.| Topic | Records | Weekly mean, previous 4 | Difference |
|---|---|---|---|
| Inference infrastructure | 18 | 0.3 | +17.8 |
| Prompt injection and jailbreaks | 9 | 1.5 | +7.5 |
Research
Peer-reviewed first, then newest.No research papers or reports were published in this week.
Policy and regulation
Newest first.No regulatory or policy records were published in this week.
Generated from the AI Sec Watch database at . Every item links to its record.