AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

Statistics

Threat intelligence overview across all tracked AI security items.

6,134

Total Items

17

Actively Exploited

0

Unpatched Critical/High

232

Last 7 Days

Top 10 CVEs by Exploit Probability (EPSS)

CVE	Title	EPSS	Severity	Exploit	Patched
CVE-2024-37032	CVE-2024-37032: Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path,	93.8%	high		—
CVE-2024-1561	CVE-2024-1561: An issue was discovered in gradio-app/gradio, where the `/component_server` endpoint improperly allows the invocation of	93.6%	high		—
CVE-2023-1177	CVE-2023-1177: Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.	93.3%	critical		—
CVE-2023-51409	CVE-2023-51409: Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affect	92.8%	critical		—
CVE-2023-49785	CVE-2023-49785: NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2	92.6%	critical		—
CVE-2023-3765	CVE-2023-3765: Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.	92.1%	critical		—
CVE-2025-3248	CVE-2025-3248: Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and	92.1%	critical	🔥 Actively Exploited	—
CVE-2023-43654	CVE-2023-43654: TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper	91.6%	critical		—
CVE-2024-2928	CVE-2024-2928: A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fix	91.6%	high		—
CVE-2023-6018	CVE-2023-6018: An attacker can overwrite any file on the server hosting MLflow without any authentication.	91.3%	critical		—

CVE-2024-3703293.8%

CVE-2024-37032: Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path,

high

CVE-2024-156193.6%

CVE-2024-1561: An issue was discovered in gradio-app/gradio, where the `/component_server` endpoint improperly allows the invocation of

high

CVE-2023-117793.3%

CVE-2023-1177: Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.

critical

CVE-2023-5140992.8%

CVE-2023-51409: Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affect

critical

CVE-2023-4978592.6%

CVE-2023-49785: NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2

critical

CVE-2023-376592.1%

CVE-2023-3765: Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.

critical

CVE-2025-324892.1%

CVE-2025-3248: Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and

critical🔥 Actively Exploited

CVE-2023-4365491.6%

CVE-2023-43654: TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper

critical

CVE-2024-292891.6%

CVE-2024-2928: A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fix

high

CVE-2023-601891.3%

CVE-2023-6018: An attacker can overwrite any file on the server hosting MLflow without any authentication.

critical

This Week vs Last Week

Total Items

111vs 199

-44%(day 3 of 7)

Critical + High

54vs 54

0%(day 3 of 7)

Vulnerabilities

42vs 25

+68%(day 3 of 7)

Research

1vs 5

-80%(day 3 of 7)

Attack Type	This Week	Last Week	Change
Supply Chain	32	31	+3%
Prompt Injection	17	20	-15%
Data Extraction	10	15	-33%
Model Theft	7	11	-36%
Jailbreak	6	12	-50%

Classification Analytics

LLM-classified attributes across all item types.

Attack Sophistication

Moderate4,349

Trivial1,267

Advanced517

Nation-State1

AI Component Targeted

Agent1,106

API1,073

Framework908

Model845

Inference515

Training Data211

RAG78

Plugin52

Exploit Maturity

2,184

No Known Exploit

17

Actively Exploited

LLM-Specific vs General AI

2,612

LLM-Specific

3,522

General AI/ML

Vendor Vulnerability Breakdown

Vulnerabilities and incidents only (excludes news and research).

Vendor	Total	Critical	High	Medium	Low
LangChain	484	138	216	117	13
HuggingFace	239	53	125	57	3
NVIDIA	100	12	51	32	5
OpenAI	96	3	39	44	3
Anthropic	85	17	43	21	2
Microsoft	76	17	38	21	0
Google	49	8	24	13	3
Amazon	30	4	23	3	0
LlamaIndex	15	3	9	2	1
Apple	8	2	3	1	0
Meta	6	0	4	2	0
Stability AI	6	0	4	2	0
Mistral	3	1	0	1	1
xAI	3	0	0	0	0

Coverage Summary

By Type

Regulatory100 Vulnerabilities2,422 Incidents24 Research566 News3,022

By Severity

medium976 info3,129 none1 high1,399 critical445 low184

Monthly Trend

All item types combined.

Month	Total Items	Critical + High
2025-09	68	36
2025-10	76	29
2025-11	64	23
2025-12	108	27
2026-01	105	41
2026-02	486	93
2026-03	796	162
2026-04	797	211
2026-05	765	230
2026-06	745	170
2026-07	828	266
2026-08	121	56

Statistics

Top 10 CVEs by Exploit Probability (EPSS)EPSS (Exploit Prediction Scoring System) from FIRST.org. Estimates the probability a CVE will be exploited in the wild within the next 30 days, based on real-world exploit activity. Source: api.first.org/data/v1/epss

This Week vs Last Week

Classification Analytics

Attack SophisticationLLM-estimated skill level required to execute the attack: trivial (script-kiddie), moderate (skilled attacker), advanced (expert), or nation-state.

AI Component TargetedPrimary AI/ML component affected (e.g., model weights, training data, inference API, plugin, agent, RAG pipeline). Classified by LLM during processing.

Exploit MaturityDerived from the CISA Known Exploited Vulnerabilities (KEV) catalog and source advisory data. 'Active' = confirmed exploitation in the wild. 'Weaponized' = known ransomware or commodity malware use.

LLM-Specific vs General AIWhether the item specifically affects large language models (prompt injection, jailbreak, etc.) vs. general AI/ML systems (model poisoning, evasion, etc.). Classified by LLM during processing.

Vendor Vulnerability BreakdownCounts items where this vendor appears in the affected_vendors field AND the item is a vulnerability or incident (not news). Severity is assigned by LLM during classification.

Coverage Summary

By Type

By SeveritySeverity is assigned by LLM based on potential impact, exploitability, and scope. Not equivalent to CVSS severity. Spans all item types including news.

Monthly Trend

Statistics

Top 10 CVEs by Exploit Probability (EPSS)EPSS (Exploit Prediction Scoring System) from FIRST.org. Estimates the probability a CVE will be exploited in the wild within the next 30 days, based on real-world exploit activity. Source: api.first.org/data/v1/epss

This Week vs Last Week

Classification Analytics

Attack SophisticationLLM-estimated skill level required to execute the attack: trivial (script-kiddie), moderate (skilled attacker), advanced (expert), or nation-state.

AI Component TargetedPrimary AI/ML component affected (e.g., model weights, training data, inference API, plugin, agent, RAG pipeline). Classified by LLM during processing.

Exploit MaturityDerived from the CISA Known Exploited Vulnerabilities (KEV) catalog and source advisory data. 'Active' = confirmed exploitation in the wild. 'Weaponized' = known ransomware or commodity malware use.

LLM-Specific vs General AIWhether the item specifically affects large language models (prompt injection, jailbreak, etc.) vs. general AI/ML systems (model poisoning, evasion, etc.). Classified by LLM during processing.

Vendor Vulnerability BreakdownCounts items where this vendor appears in the affected_vendors field AND the item is a vulnerability or incident (not news). Severity is assigned by LLM during classification.

Coverage Summary

By Type

By SeveritySeverity is assigned by LLM based on potential impact, exploitability, and scope. Not equivalent to CVSS severity. Spans all item types including news.

Monthly Trend

Top 10 CVEs by Exploit Probability (EPSS)

Attack Sophistication

AI Component Targeted

Exploit Maturity

LLM-Specific vs General AI

Vendor Vulnerability Breakdown

By Severity

Top 10 CVEs by Exploit Probability (EPSS)

Attack Sophistication

AI Component Targeted

Exploit Maturity

LLM-Specific vs General AI

Vendor Vulnerability Breakdown

By Severity