News
July 12, 2026 Security Vulnerability Roundup: AI-Dev Tools Flowise and Crawl4AI Allow No-Login Takeover — Does It Affect You?
AISecurity
A roundup of the July 12, 2026 vulnerabilities rated 9.0 or higher. The AI-app builder Flowise and the AI data-collection tool Crawl4AI both have flaws allowing no-login takeover or file overwrite, and fixes are already out. We also organize seven network-device flaws so you can check whether a product you use is affected.
2026.07.1371 views
News
PraisonAI gets four more CVEs, one at 10.0, all fixes shipped
DevelopmentAISecurity
PraisonAI, a popular tool for delegating work to AI, has five flaws including the max-severity (10.0) CVE-2026-61447. A single crafted AI instruction can run malicious code on the server and steal secrets like API keys. Past PraisonAI flaws were attacked within hours of disclosure. Update both packages now.
2026.07.1155 views
News
Exploit code published for mcp-server-kubernetes CVE-2026-61459 — and scanners stay silent
InfrastructureAISecurity
mcp-server-kubernetes, a popular tool that lets AI assistants operate Kubernetes, has a critical flaw (CVE-2026-61459, severity 9.8): unauthenticated argument injection redirects kubectl and steals the cluster admin's credentials. Versions before 3.9.0 are affected. Update now.
2026.07.1139 views
News
9Router default password 123456 (CVE-2026-63732): server takeover risk
SecurityAIDevelopment
9Router, a popular AI coding router, has critical flaws (CVE-2026-55500, 9.9) that leak all stored API keys and tokens, plus a 10.0 unauthenticated RCE. Update to v0.4.80+ and don't expose it to the internet.
2026.07.11326 views
News
Popular AI Agent UI 'Hermes WebUI' Server-Takeover Flaw CVE-2026-58123 — No Password Needed, Plus API-Key Theft; Update Now
DevelopmentAISecurity
A flaw (CVE-2026-58123, severity 9.8) in the popular tool Hermes WebUI—which runs your own AI agent from a browser (15,000+ GitHub stars)—lets attackers take over the server with no password. A second flaw, CVE-2026-58122, strips out paid LLM API keys and messaging credentials. Fixes are out for both, and updating to the latest stops them. We explain the scope and the fix.
2026.07.10101 views
News
Popular AI Coding Tool Cline Hijackable by Any Website (CVE-2026-59723): Command Execution and API Key Theft — Update to 3.0.30
AISecurityDevelopment
Cline, an AI coding tool used by over 5 million people, has a critical flaw (CVE-2026-59723, CVSS 8.8). Simply opening a malicious website can hijack the Cline on your machine, run commands, and steal API keys and source code. It is the second same-shaped hole after May. Update to the latest version (3.0.30 or later) now.
2026.07.0980 views
News
Critical SSRF in Repomix (CVE-2026-59702): The Popular AI Code-Packing Tool's Server Could Leak Cloud Keys — Update to 1.14.1
AIDevelopmentSecurity
Repomix, the popular tool that bundles a codebase into one file for AI, has a critical flaw (CVE-2026-59702, CVSS 9.3). A crafted URL could turn its public server into a proxy and steal internal data such as cloud credential keys. The official site is patched; if you self-host, update to 1.14.1 now.
2026.07.0944 views
Lab
Claude Desktop Comes to Linux: Cowork Runs a Real VM Inside Your PC
DevelopmentLinuxAI
Claude's desktop app now runs on Linux (Ubuntu/Debian). Cowork boots a VM inside your own PC, but Linux trips over a 'kvm' permission. Here's why, and the fix.
2026.07.03359 views
News
CVE-2025-62593: One Web Page Can Hijack a Ray Developer's Laptop
AISecurity
Ray, the AI distributed-computing framework used by OpenAI and Uber, has a flaw (CVE-2026-57516): loading a crafted dataset (.tar) runs arbitrary code on the server. Ingesting public data and models becomes dangerous. Severity 8.8 — update to 2.56.0.
2026.07.0249 views
News
LLaMA-Factory RCE Flaw (CVE-2026-58116): An Exposed Web UI Lets Anyone Hijack the Server
SecurityAI
LLaMA-Factory, a popular AI fine-tuning tool, has a critical flaw (CVE-2026-58116): an exposed training screen lets a malicious model hijack the server. No fix yet.
2026.06.3037 views
News
Unauthenticated Flaws Pile Up in ML Feature Store Feast: Server Takeover and Arbitrary File Write (CVE-2026-56121 & CVE-2026-23537) — Update to v0.63.0
SecurityAI
Feast, a data platform used in AI and machine learning, has a flaw that lets an attacker take over the server without authentication. CVE-2026-56121, with a top-class severity of CVSS 9.8. Versions before 0.63.0 are affected; a single crafted request from outside can run arbitrary code on the server running Feast. Update to 0.63.0 now.
2026.06.2538 views
News
What Is Sakana AI's "Fugu"? The Japanese AI That Bundles Other AIs
Japanese CompaniesDevelopmentAI
Japan's Sakana AI launched Fugu and Fugu Ultra, an AI that bundles and routes between multiple models. What it is, and how it differs from Claude and ChatGPT, explained for non-experts.
2026.06.2387 views
