Skip to content
AI Sec Watch

What changed in AI security, Apr 20 to Apr 26, 2026

Apr 20 to Apr 26, 2026 (ISO week 2026-W17). Weeks run Monday to Sunday in UTC.

169 records published, -8 on the previous week: 52 vulnerabilities (+13), 0 incidents (no change), 6 research items (-17), 111 news items (-3), 0 policy items (-1).

Critical and high advisories

Vulnerability records rated critical or high, newest first. Showing 25 of 37.
All advisories for the week

Exploitation signals

Vulnerabilities published in the week that are listed in the CISA Known Exploited Vulnerabilities catalog or have an EPSS score of 10% or more.
AdvisoryExploitationEPSSPublished
CVE-2026-39987: Marimo Remote Code Execution Vulnerability
CVE-2026-39987CISA Known Exploited Vulnerabilities
Known exploited37.9%

Packages that began delegating to a language model

Exposure Registry packages whose first release declaring an LLM SDK, agent framework or MCP dependency was published in the week.
All packages
PackageEcosystemLLM SDKsReleaseReleased
scaoPyPIHugging Face Hub / Transformers0.1.0
jupyter-ai-toolsPyPIModel Context Protocol SDK0.5.0

Topics that moved

Largest increases over the mean of the 4 previous weeks, for topics with at least 3 records in the week.
All topics
TopicRecordsWeekly mean, previous 4Difference
Coding assistants72.0+5.0
Prompt injection and jailbreaks73.5+3.5
AI agents1715.0+2.0
Model Context Protocol54.5+0.5

Research

Peer-reviewed first, then newest.

Policy and regulation

Newest first.

No regulatory or policy records were published in this week.

Generated from the AI Sec Watch database at . Every item links to its record.

RSS feed of weekly changesPrevious week