Incidents tagged LLM

A critical vulnerability (CVE-2026-59726) in Ruflo's MCP bridge exposed unauthenticated shell command execution via default network binding (0.0.0.0:3001). This flaw enabled attackers to achieve remote code execution, steal LLM API keys, and poison AI model memory.

Evidence indicates that Custom Code Guardrails is affected by remote code execution.

Novee has introduced an AI Red Teaming platform to proactively identify security vulnerabilities in LLM-powered applications. Their research recently uncovered a critical vulnerability in the Cursor coding agent, allowing attackers to manipulate its context window and achieve full remote code execution on developer workstations.

Evidence indicates that AI systems is affected by remote code execution. Exploitation evidence is classified as confirmed in the wild.

Evidence indicates that AI agents is affected by a security issue. Exploitation evidence is classified as confirmed in the wild.

Evidence indicates that Meta is affected by remote code execution.

Evidence indicates that Claude is affected by remote code execution.

Evidence indicates that Large Language Model is affected by prompt injection. Exploitation evidence is classified as demonstrated.