PT-2026-37185

Name of the Vulnerable Software and Affected Versions LiteLLM versions 1.74.2 through 1.83.6 Description LiteLLM, a proxy server for Large Language Model APIs, contains a flaw where two endpoints used to preview an MCP server before saving it accept a full server configuration in the request body...

document-qa-engine (>=0.5.1, <=0.6.0), kapso (>=0.1.0, <=0.1.5) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.18)

langchain-openai PYPI version 0.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - document-qa-engine =0.5.1, =0.1.0, =0.1.1, =1.0.0, =1.0.1, =1.0.6 - veee 0.0.3 Source cves: CVE-2026-41488 Source advisory:...

bugbug (0.0.550), okazaki (>=0.0.2, <=0.0.4) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.17)

langchain-openai PYPI version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bugbug 0.0.550 - okazaki =0.0.2, =0.1.1, =0.1.0, =0.3.3, =0.0.3, =0.7.0 Source cves: CVE-2026-41488 Source advisory:...

beehive-ai (>=0.0.1, <=0.0.2), documentgraph (0.1.2) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.1)

langchain-openai PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - beehive-ai =0.0.1, =0.0.3, =0.1.0, =0.0.3, =0.0.10 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

atom-llm (0.1.0), docksec (>=2026.2.23, <=2026.5.6) +5 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.4)

langchain-text-splitters PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - atom-llm 0.1.0 - docksec =2026.2.23, =0.1.2, =0.1.0, =1.0.0, =2.0.4 Source cves: CVE-2026-41481 Source advisory:...

PT-2026-35643

Name of the Vulnerable Software and Affected Versions LiteLLM versions 1.81.16 through 1.83.6 Description An unauthenticated pre-auth SQL injection exists in the proxy API key verification process. The issue occurs because a database query mixes caller-supplied values directly into the query text...

CVE-2026-41265

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the AirtableAgents class. The issue results from the lack of proper sandboxing when evaluating an LLM generated python script. Using prompt...

CVE-2026-41264 Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the CSVAgents class. The issue results from the lack of proper sandboxing when evaluating an LLM generated python script. An attacker can...

CVE-2026-41265

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the AirtableAgents class. The issue results from the lack of proper sandboxing when evaluating an LLM generated python script. Using prompt...

CVE-2026-41349: Missing Authorization

OpenClaw before 2026.3.28 contains an agentic consent bypass vulnerability allowing LLM agents to silently disable execution approval via config.patch parameter. Remote attackers can exploit this to bypass security controls and execute unauthorized operations without user consent...

llm-math-education (>=0.3.0, <=0.5.1) potentially affected by CVE-2026-41140 via poetry (1.4.0)

poetry PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - llm-math-education =0.3.0, =0.5.1 Source cves: CVE-2026-41140 Source advisory: OSV:GHSA-73H3-MF4W-8647...

Taint-Style Vulnerability Detection and Confirmation for Node.Js Packages Using LLM Agent Reasoning

The rapidly evolving Node$.$js ecosystem currently includes millions of packages and is a critical part of modern software supply chains, making vulnerability detection of Node$.$js packages increasingly important. However, traditional program analysis struggles in this setting because of dynamic...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that target Kubernetes environments by install a full LLM proxy service on the victim's machine, allowing the attacker to route LLM traffic through the compromised server. Remediation Avoid using kube-node-health...

Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

Abstract Trend Micro's Zero Day Initiative has identified a vulnerability affecting FlowiseAI Flowise. Vulnerability Details - Version tested: 3.0.13 - Installer file: https://github.com/FlowiseAI/Flowise - Platform tested: Ubuntu 25.10 Analysis This vulnerability allows remote attackers to execu...

aqueduct-llm (0.0.1) potentially affected by CVE-2026-6607 via fschat (0.2.2)

fschat PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on fschat and may be impacted: - aqueduct-llm 0.0.1 Source cves: CVE-2026-6607 Source advisory: OSV:GHSA-5H65-JX66-J7P5...

aqueduct-llm (0.0.1) potentially affected by CVE-2026-6607 via fschat (0.2.2)

fschat PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on fschat and may be impacted: - aqueduct-llm 0.0.1 Source cves: CVE-2026-6607 Source advisory: GHSA-5H65-JX66-J7P5...

TitanCA: Lessons from Orchestrating LLM Agents to Discover 100+ CVEs

Software vulnerabilities remain one of the most persistent threats to modern digital infrastructure. While static application security testing SAST tools have long served as the first line of defense, they suffer from high false-positive rates. This article presents TitanCA, a collaborative proje...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +15418 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.80)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.31.0, =0.5.0, =0.6.0, =0.5.0, =0.6.0, =0.5.0, =0.9.1, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.9.0 and more Source cves: CVE-2025-14813 Source advisory: OSV:GHSA-574F-3G2M-X479...

agentlite-llm (0.1.12), codeqai (>=0.0.11, <=0.0.19) +17 more potentially affected by CVE-2026-41488 via langchain-openai (0.0.5)

langchain-openai PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agentlite-llm 0.1.12 - codeqai =0.0.11, =0.0.1rc1, =0.11.1, =0.2.0, =0.0.3, =0.0.2, =0.3.0, =0.0.4, =0.0.5 - py-chronicler 0.1.0...

bugbug (0.0.550), okazaki (>=0.0.2, <=0.0.4) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.17)

langchain-openai PYPI version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bugbug 0.0.550 - okazaki =0.0.2, =0.1.1, =0.1.0, =0.3.3, =0.0.3, =0.7.0 Source cves: CVE-2026-41488 Source advisory:...