What changed in AI security, Aug 11 to Aug 17, 2025
Aug 11 to Aug 17, 2025 (ISO week 2025-W33). Weeks run Monday to Sunday in UTC.
17 records published, -19 on the previous week: 6 vulnerabilities (-22), 0 incidents (no change), 1 research item (+1), 9 news items (+1), 1 policy item (+1).
Critical and high advisories
Vulnerability records rated critical or high, newest first.- High
CVE-2025-55284: Claude Code confirmation prompt bypass allows network file exfiltration
CVE-2025-55284NVD/CVE Database - High
CVE-2025-23298: NVIDIA Merlin Transformers4Rec code injection via a Python dependency
CVE-2025-23298NVD/CVE Database - High
CVE-2025-53773: GitHub Copilot and Visual Studio command injection allowing local code execution
CVE-2025-53773NVD/CVE Database - High
CVE-2025-55012: Zed Agent Panel allows remote code execution via permissions bypass
CVE-2025-55012NVD/CVE Database - Critical
CVE-2025-45146: ModelCache for LLM deserialization flaw in data_manager.py
CVE-2025-45146NVD/CVE Database - High
CVE-2025-8747: Keras safe mode bypass in Model.load_model via crafted .keras archive
CVE-2025-8747NVD/CVE Database
Exploitation signals
Vulnerabilities published in the week that are listed in the CISA Known Exploited Vulnerabilities catalog or have an EPSS score of 10% or more.No vulnerability published in this week is listed as exploited or has an EPSS score of 10% or more.
Packages that began delegating to a language model
Exposure Registry packages whose first release declaring an LLM SDK, agent framework or MCP dependency was published in the week.| Package | Ecosystem | LLM SDKs | Release | Released |
|---|---|---|---|---|
| gepa | PyPI | LangChain, LiteLLM | 0.0.3 |
Topics that moved
Largest increases over the mean of the 4 previous weeks, for topics with at least 3 records in the week.| Topic | Records | Weekly mean, previous 4 | Difference |
|---|---|---|---|
| Prompt injection and jailbreaks | 5 | 3.8 | +1.3 |
Research
Peer-reviewed first, then newest.Policy and regulation
Newest first.Generated from the AI Sec Watch database at . Every item links to its record.