When AI infrastructure becomes the target: Securing gateways and control points

In this article 1. AI workloads are becoming high-value control points 2. Case study 1: LiteLLM gateway compromise 3. Case study 2: RAGFlow compromise 4. Case study 3: Kestra compromise 5. Mitigation and protection guidance 6. MITRE ATT&CK techniques observed 7. References 8. Learn more AI is...

When AI infrastructure becomes the target: Securing gateways and control points

In this article 1. AI workloads are becoming high-value control points 2. Case study 1: LiteLLM gateway compromise 3. Case study 2: RAGFlow compromise 4. Case study 3: Kestra compromise 5. Mitigation and protection guidance 6. MITRE ATT&CK techniques observed 7. References 8. Learn more AI is...

PT-2026-79789

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc server::graph compute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The...

Malicious Package

Overview optimizely-starter-kit-for-fastly-compute is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

BIT-MONGODB-2026-13072 MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default...

GO-2026-4403 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.2, kubeflow-katib...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: go, nvidia-nsight-compute-13.0, nvidia-nsight-compute-12.8, newrelic-fluent-bit-output, nvidia-nsight-compute-12.9, kubeflow-katib, nvidia-nsight-compute-13.1...

GO-2025-3828 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, nvidia-nsight-compute-12.8, newrelic-fluent-bit-output, nvidia-nsight-compute-12.9, nvidia-nsight-compute-13.2, kubeflow-katib, agentbeat, nemo, nvidia-nsight-compute-13.1...

openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova

A flaw in OpenStack Nova’s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw...

org.elasticsearch.plugin:x-pack-esql (9.5.0), org.elasticsearch.plugin:x-pack-esql-compute (9.5.0) +3 more potentially affected by CVE-2026-72645 via org.elasticsearch:elasticsearch (9.5.0)

org.elasticsearch:elasticsearch MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.plugin:x-pack-esql 9.5.0 - org.elasticsearch.plugin:x-pack-esql-compute 9.5.0 -...

org.elasticsearch.plugin:x-pack-esql (9.5.0), org.elasticsearch.plugin:x-pack-esql-compute (9.5.0) +3 more potentially affected by CVE-2026-72678 via org.elasticsearch:elasticsearch (9.5.0)

org.elasticsearch:elasticsearch MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.plugin:x-pack-esql 9.5.0 - org.elasticsearch.plugin:x-pack-esql-compute 9.5.0 -...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.4) +4 more potentially affected by CVE-2026-72678 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.4)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.2, =9.4.4 Source cves: CVE-2026-72678 Source advisory: MEND:CVE-2026-72678...

org.elasticsearch.plugin:x-pack-esql (9.5.0), org.elasticsearch.plugin:x-pack-esql-compute (9.5.0) +3 more potentially affected by CVE-2026-72687 via org.elasticsearch:elasticsearch (9.5.0)

org.elasticsearch:elasticsearch MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.plugin:x-pack-esql 9.5.0 - org.elasticsearch.plugin:x-pack-esql-compute 9.5.0 -...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.3) +4 more potentially affected by CVE-2026-72683 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.3)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.4.2 Source cves: CVE-2026-72683 Source advisory: MEND:CVE-2026-72683...

CVE-2026-68274

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix buffer overflow in steered register list allocation The size calculation for the steered register extarray uses only the geometry DSS mask gdssmask to determine the number of entries to allocate: total =...

CVE-2026-68274

The CVE-2026-68274 issue affects the Linux kernel component drm/xe/guc where allocation size for the steered register list uses only g_dss_mask, while the iteration over DSS bits includes both g_dss_mask and c_dss_mask. This mismatch can cause a buffer overflow, leading to memory corruption (list...

CVE-2026-68274 drm/xe/guc: Fix buffer overflow in steered register list allocation

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix buffer overflow in steered register list allocation The size calculation for the steered register extarray uses only the geometry DSS mask gdssmask to determine the number of entries to allocate: total =...

EUVD-2026-55375

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix buffer overflow in steered register list allocation The size calculation for the steered register extarray uses only the geometry DSS mask gdssmask to determine the number of entries to allocate: total =...

Beyond Detection Accuracy: Measuring Explanation Cost, Stability, and Utility for Resource-Aware IoT Intrusion Detection

Machine-learning intrusion-detection studies commonly emphasize predictive accuracy while treating explanation generation as a computationally free post-processing step. This study jointly evaluates predictive effectiveness, explanation cost, local explanation stability, and selective explanation...

libXfont2: libXfont2: arbitrary code execution via heap buffer overflow in ComputeScaledProperties

A flaw was found in libXfont2. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by providing a specially crafted Portable Compiled Format PCF font file. Due to missing bounds checks when processing font properties in the...