AI Remote Code Execution Vulnerability

At Pwn2Own Berlin, several zero-day vulnerabilities were discovered targeting critical AI infrastructure components, including Chroma DB, NVIDIA Triton Inference Server, and Redis. These exploits leveraged issues such as development artifacts, multi-bug chains, use-after-free conditions, and outdated libraries, posing risks like unauthenticated data access and arbitrary code execution in exposed AI systems.

What Happened

At Pwn2Own Berlin, several zero-day vulnerabilities were discovered targeting critical AI infrastructure components, including Chroma DB, NVIDIA Triton Inference Server, and Redis. These exploits leveraged issues such as development artifacts, multi-bug chains, use-after-free conditions, and outdated libraries, posing risks like unauthenticated data access and arbitrary code execution in exposed AI systems.

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

Exposure reason: This incident does not currently match a technology in My AI Stack.

Exploitation status: UNKNOWN

Primary entities:

Timeline

• Incident first seen
  Jul 29, 2025 05:30

  BugSkan first recorded this incident.

• Trend Micro State of AI Security Report, 1H 2025 - TrendMicro
  Jul 29, 2025 05:30

  trendmicro.com · Research

Sources

My AI Stack Match