Ai-Infrastructure

CVE-2026-75149: Marimo Notebook MCP Code Injection Flaw

ATLAS OWASP HIGH ▲ 8.2 The Hacker News Aug 26, 2026

A high-severity code injection vulnerability (CVE-2026-75149) in Marimo notebook software allowed attackers to embed malicious Model Context Protocol (MCP) server commands in crafted notebooks, triggering local subprocess execution before any user cell runs. The flaw, scoring 8.8 on CVSS v3.1, required no attacker authentication and only needed the victim to open the notebook in edit mode. Marimo patched the issue in version 0.23.15 by treating all notebook metadata as attacker-controlled and enforcing an allowlist over configuration sections including AI, MCP, and secrets.

Trivy Flaw Behind 2,500-Org Breach, Not LiteLLM Packages

ATLAS OWASP HIGH ▲ 7.2 SecurityWeek Aug 15, 2026

A compromise affecting over 2,500 organisations was initially attributed to malicious LiteLLM packages but has been re-attributed to Trivy, an open-source security scanner widely used in AI and cloud-native pipelines. Critically, over 95% of affected organisations were already exposed before the malicious LiteLLM packages were even published, pointing to a supply chain vulnerability in tooling infrastructure rather than the AI proxy layer. This incident underscores the risk of misattribution in supply chain attacks and highlights how AI-adjacent tooling can serve as an overlooked attack vector.

CVE-2026-5027: Langflow RCE Actively Exploited

ATLAS OWASP CRITICAL ▲ 9.2 The Hacker News Jun 11, 2026

A critical unpatched path traversal vulnerability (CVE-2026-5027, CVSS 8.8) in Langflow, a widely-used open-source AI application builder, is being actively exploited in the wild to achieve unauthenticated remote code execution. Because Langflow enables auto-login by default, attackers require no credentials to reach the vulnerable endpoint and can exploit it with a single HTTP request. With approximately 7,000 publicly exposed Langflow instances and nation-state actors already targeting related Langflow flaws, the risk to AI development infrastructure is severe.

Claude Mythos Unauthorized Access Exposes AI Security

ATLAS OWASP HIGH ▲ 7.2 The Hacker News Jun 08, 2026

A reported unauthorized access to Anthropic's Claude Mythos model within hours of its limited technical preview highlights acute security risks as agentic AI is deployed across classified defense and intelligence networks. The incident underscores vulnerabilities specific to AI infrastructure in high-security environments, including training data poisoning, access control failures, and cross-domain classification boundary erosion. Secure IT infrastructure, governed access, and cross-domain data controls are identified as prerequisites for safe AI deployment at mission scale.

ComfyUI RCE Exploited in Cryptomining Botnet Campaign

ATLAS OWASP HIGH ▲ 7.2 The Hacker News Apr 13, 2026

Threat actors are actively exploiting internet-exposed ComfyUI instances — a popular AI image generation platform — by abusing its custom node execution feature to achieve unauthenticated remote code execution. Over 1,000 publicly accessible instances have been identified as targets, with compromised hosts enrolled in Monero and Conflux cryptomining operations and a Hysteria V2 proxy botnet. The attack highlights critical supply chain and insecure plugin design risks inherent in AI/ML tooling ecosystems.

Claude Source Code Leak Reveals AI Supply Chain Risk

ATLAS OWASP HIGH ▲ 8.2 Dark Reading Apr 03, 2026

A reported source code leak affecting Claude, Anthropic's large language model, underscores systemic weaknesses in AI software supply chains and the absence of robust oversight mechanisms at critical development and distribution layers. The incident highlights how proprietary model code, training pipelines, and system prompts can become high-value targets for adversarial actors seeking to enable model theft, backdoor insertion, or competitive intelligence gathering. This event serves as a broader warning about treating AI development infrastructure with the same rigor applied to other critical systems.