ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “ai coding”

951 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 1381Exploit / PoC 972Malware 710Ransomware 701Policy & legal 398Data breach 393Threat actor 342Phishing & fraud 316AI safety & security 288Industry 246AI tools & infra 99AI industry 99Model release 74Research 68
SeverityAllcritical 3086high 1101medium 1063low 464info 563

[remote] PraisonAI praisonaiagents 1.6.77 - Remote Code Execution

Public RCE exploit targets PraisonAI praisonaiagents 1.6.77, an open-source multi-agent AI framework.

Exploit-DB entry 52639 publishes a remote code execution exploit against praisonaiagents 1.6.77, the agent library from PraisonAI used for building LLM-powered multi-agent applications. The PoC demonstrates how attackers could achieve arbitrary code execution on deployments running the vulnerable version. This continues a pattern of serious flaws surfacing in rapidly developed AI agent frameworks.

Exploit-DB · Aug 11, 2026Exploit / PoC

Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise

Wiz found LiteLLM auth bypass (CVE-2026-59822) and post-auth RCE (CVE-2026-59821) chainable to cloud compromise; the bypass is in CISA KEV with in-the-wild exploitation.

Wiz scanned roughly 3,074 internet-facing LiteLLM deployments and found 9.6% accepted the default master key sk-1234 or required no authentication, making post-auth attacks effectively pre-auth. The MCP endpoint accepts any Bearer token and grants a valid session (CVE-2026-59822), confirmed exploited in the wild via honeypots and added to CISA's Known Exploited Vulnerabilities catalog. Custom code guardrails allow post-auth root-level RCE via exec(compile(...)) (CVE-2026-59821), while pass-through endpoints lack URL validation, enabling cloud credential theft in post-auth scenarios. All assigned vulnerabilities have been patched; the research was presented at DEF CON 34.

Wiz Blog · 7d agoExploit / PoC in the wildCVE-2026-59822CVE-2026-598211

Langflow Remote Code Execution Vulnerability Exploited in Attacks (CVE-2026-0768)

Critical CVSS 9.8 RCE CVE-2026-0768 in Langflow is under active exploitation, with attackers probing for credentials and secrets.

CVE-2026-0768, a critical (CVSS 9.8) remote code execution flaw in Langflow's code validator, lets attackers execute Python code with root privileges via the validate endpoint's code parameter. VulnCheck honeypots in the UK detected Russian-origin exploitation performing reconnaissance and credential harvesting, querying environment variables like LANGFLOW_SUPERUSER and AWS keys and reading Langflow's secret key. Versions before 1.4.2 are affected; no vendor advisory or public PoC was available at reporting time.

Qualys ThreatPROTECT · 14d agoExploit / PoC in the wildCVE-2026-0768CVE-2026-33017CVE-2026-5027+1 CVEs1

[webapps] Langflow 1.10.0 - RCE

A public proof-of-concept demonstrates remote code execution in Langflow 1.10.0, the open-source AI workflow builder.

Exploit-DB lists a remote code execution proof of concept targeting Langflow version 1.10.0. Langflow is a widely used open-source tool for building AI agent and LLM workflows. The listing does not include a CVE id or evidence of in-the-wild exploitation, but RCE in AI development tooling is relevant to teams running it in production.

Exploit-DB · 14d agoExploit / PoC1