CVE Tools
Track your stack

AI & ML

4,884 CVEs tracked since 2001. In the last 12 months, 2,257, +161% on the 12 before.

AI & ML by subsector, Oct 2026 so far

Oct 2026 so far: 289 CVEs across 6 subsectors. Area is each subsector's share; inside are the products it counted most. Point at one to read it.
  • Agent tooling11138% · 20 vendors
  • LLM serving & inference7526% · 22 vendors
  • ML frameworks5318% · 13 vendors
  • Notebooks & MLOps4215% · 6 vendors

Also: Not yet sub-classified 6, Vector DBs & RAG 2.

Month by month

Every monthly snapshot of AI & ML. A column is the CVEs published that month.

Sep 2021 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
AI & ML CVEs per month
MonthCVEs
2021-098
2021-108
2021-1145
2021-1211
2022-019
2022-0238
2022-039
2022-040
2022-0526
2022-0614
2022-0713
2022-084
2022-0964
2022-109
2022-1139
2022-129
2023-016
2023-029
2023-030
2023-0414
2023-0520
2023-0631
2023-0723
2023-0827
2023-0940
2023-1014
2023-1121
2023-1231
2024-0150
2024-0243
2024-0334
2024-0496
2024-0551
2024-06171
2024-0743
2024-0826
2024-0951
2024-1072
2024-1144
2024-1230
2025-0150
2025-0221
2025-03315
2025-0443
2025-0553
2025-0641
2025-0772
2025-0844
2025-0979
2025-1057
2025-1149
2025-1280
2026-01113
2026-0299
2026-03202
2026-04249
2026-05274
2026-06272
2026-07300
2026-08278
2026-09284
2026-10289

Vendors

Who shipped the most AI & ML CVEs in Oct 2026 so far, with their rank across all vendors.

  1. Linuxfoundation37#39
  2. Vllm-project29#54
  3. Langflow24#65
  4. Praison20#75
  5. Open-webui19#81
  6. Sgl-project17#88
  7. Docling-project11#138
  8. Kvcache-ai10#158

Weaknesses

The weakness classes behind AI & ML CVEs in Oct 2026 so far.

  1. CWE-22 Path Traversal28
  2. CWE-863 Incorrect Authorization27
  3. CWE-862 Missing Authorization25
  4. CWE-200 Information Exposure16
  5. CWE-79 XSS13
  6. CWE-639 Auth Bypass via User Key12

Latest CVEs

The 15 most recently published vulnerabilities in AI & ML.

  1. CVE-2026-110732AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.8.6 - Missing Authorization to Administrator Account Takeover via Unauthenticated MCP OAuth Client Registration7.5
  2. CVE-2026-61707SOCFortress CoPilot: Stored case-report template injection permits backend code execution9.0
  3. CVE-2026-119122Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check5.3
  4. CVE-2026-119121Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for4.3
  5. CVE-2026-119120Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name7.5
  6. CVE-2026-119119Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields7.5
  7. CVE-2026-119118Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags6.5
  8. CVE-2026-119052llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length7.5
  9. CVE-2026-119050Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection8.1
  10. CVE-2026-119025open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows7.5
  11. CVE-2026-118668LangGraph JavaScript custom authentication may permit cross-user Store access—
  12. CVE-2026-118667LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests4.3
  13. CVE-2026-118684MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads5.9
  14. CVE-2026-118683MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf8.8
  15. CVE-2026-118619Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability8.8

The record

Busiest month
Mar 2025, 315 CVEs
Oct 2026 so far
289 CVEs from 65 vendors
Deployment
Mixed, 60%
Monthly snapshots
120 since 2001
All 15 sectors on one map

Is your business exposed to threats like these?

Discuss a security assessment of your internet-facing systems. Scope, price and timing agreed before testing.

Request an assessment