PT-2026-42089

Name of the Vulnerable Software and Affected Versions NVIDIA TRT-LLM affected versions not specified Description An issue exists where an unchecked return value can lead to a null pointer dereference, which occurs when a program attempts to read or write to a memory location using a pointer that ...

Exploit for CVE-2025-11203

CVE-2025-11203 – LiteLLM Health Endpoint APIKEY Information D...

Security Bulletin: NVIDIA TensorRT-LLM - May 2026

NVIDIA has released a software update for NVIDIA® TensorRT-LLM. To protect your system, clone or update this software to TensorRT-LLM v1.2.1 from GitHub. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses and the...

CVE-2026-41947

Dify before version 1.14.2 contains an authorization bypass vulnerability that allows authenticated editor users to set and enable trace configurations for any application regardless of tenant ownership. Attackers can exploit missing tenant ownership checks in the trace configuration endpoints to...

arbor-ai (0.1.13), coreason-runtime (>=0.1.0, <=0.10.8) +6 more potentially affected by CVE-2026-7304 via sglang (>=0.4.5, <=0.5.2)

sglang PYPI version =0.4.5, =0.1.0, =1.1.0rc1, =0.0.1, =0.0.1.post1, =0.0.0, =0.8.0, =0.10.9 Source cves: CVE-2026-7304 Source advisory: OSV:GHSA-36M8-W8QF-G76P...

arbor-ai (0.1.13), coreason-runtime (>=0.1.0, <=0.10.8) +6 more potentially affected by CVE-2026-7304 via sglang (>=0.4.5, <=0.5.2)

sglang PYPI version =0.4.5, =0.1.0, =1.1.0rc1, =0.0.1, =0.0.1.post1, =0.0.0, =0.8.0, =0.10.9 Source cves: CVE-2026-7304 Source advisory: GHSA-36M8-W8QF-G76P...

CVE-2026-41947: Authorization Bypass Through User-Controlled Key

Dify before version 1.14.2 contains an authorization bypass vulnerability that allows authenticated editor users to set and enable trace configurations for any application regardless of tenant ownership. Attackers can exploit missing tenant ownership checks in the trace configuration endpoints to...

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Litellm

LiteLLM CVE-2026-42203 PoC Usage Instructions This document e...

databricks-genai (>=1.1.0, <=2.0.0a9), llm-foundry (>=0.12.0, <=0.14.5) +5 more potentially affected by CVE-2026-2652 via mlflow (2.16.2)

mlflow PYPI version 2.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - databricks-genai =1.1.0, =0.12.0, =0.0.3.post33, =0.0.16, =0.9.35rc0, =0.8.7, =0.8.8 Source cves: CVE-2026-2652 Source advisory:...

databricks-genai (>=1.2.0a0, <=1.2.0a6), deeptrees (>=1.6.0, <=1.8.2) +1 more potentially affected by CVE-2026-2652 via mlflow (2.18.0)

mlflow PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - databricks-genai =1.2.0a0, =1.6.0, =0.15.1, =0.18.0 Source cves: CVE-2026-2652 Source advisory: OSV:GHSA-75CM-X2W3-8MGF...

llm-foundry (>=0.9.1, <=0.10.0), mlflow-pytorch-exp (0.0.1) potentially affected by CVE-2026-2652 via mlflow (2.14.3)

mlflow PYPI version 2.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - llm-foundry =0.9.1, =0.10.0 - mlflow-pytorch-exp 0.0.1 Source cves: CVE-2026-2652 Source advisory: OSV:GHSA-75CM-X2W3-8MGF...

llm-foundry (0.11.0), modeva (>=1.0.14, <=2.1.0) potentially affected by CVE-2026-2652 via mlflow (2.15.1)

mlflow PYPI version 2.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - llm-foundry 0.11.0 - modeva =1.0.14, =2.1.0 Source cves: CVE-2026-2652 Source advisory: OSV:GHSA-75CM-X2W3-8MGF...

databricks-genai (>=1.2.0a0, <=1.2.0a6), deeptrees (>=1.6.0, <=1.8.2) +1 more potentially affected by CVE-2026-2652 via mlflow (2.18.0)

mlflow PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - databricks-genai =1.2.0a0, =1.6.0, =0.15.1, =0.18.0 Source cves: CVE-2026-2652 Source advisory: OSV:PYSEC-2026-2221...

api-python-bet-project (>=0.1.23, <=0.1.28), llm-foundry (>=0.19.0, <=0.21.0) +8 more potentially affected by CVE-2026-2652 via mlflow (2.21.3)

mlflow PYPI version 2.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - api-python-bet-project =0.1.23, =0.19.0, =2.1.2, =0.1.11, =0.1.51.5, =1.0.4 - terratorch 1.0.1 - wedata-pre-code 2.0.1 Source cves: CVE-2026-2652...

llm-foundry (>=0.9.1, <=0.10.0), mlflow-pytorch-exp (0.0.1) potentially affected by CVE-2026-2652 via mlflow (2.14.3)

mlflow PYPI version 2.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - llm-foundry =0.9.1, =0.10.0 - mlflow-pytorch-exp 0.0.1 Source cves: CVE-2026-2652 Source advisory: OSV:PYSEC-2026-2221...

LLM vLLM DoS

The vulnerability of the v1/completions interface of the LLM library for working with large language models is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

babelon (>=0.0.0, <=0.2.0), fossil-mastodon (>=0.1.0, <=0.3.0) +14 more potentially affected by CVE-2026-31236 via llm (>=0.4.1, <=0.26.0)

llm PYPI version =0.4.1, =0.0.0, =0.1.0, =0.1.0a0, =0.9.0, =11.0.0rc1, =0.1.0, =0.1.0, =0.7.0, =0.8.1 - rapidagents 0.1.0 and more Source cves: CVE-2026-31236 Source advisory: GHSA-G76P-4VG5-F4QH...

babelon (>=0.0.0, <=0.2.0), fossil-mastodon (>=0.1.0, <=0.3.0) +14 more potentially affected by CVE-2026-31236 via llm (>=0.4.1, <=0.26.0)

llm PYPI version =0.4.1, =0.0.0, =0.1.0, =0.1.0a0, =0.9.0, =11.0.0rc1, =0.1.0, =0.1.0, =0.7.0, =0.8.1 - rapidagents 0.1.0 and more Source cves: CVE-2026-31236 Source advisory: OSV:GHSA-G76P-4VG5-F4QH...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +8817 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.54)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-43513 Source advisory: GHSA-5MP6-JRQ3-R938...

CVE-2026-31236

The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec function...