LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2, the proxy reuses one cryptographic context for at-rest secrets and session tokens, allowing an…
Paste a docker-compose, requirements.txt or package.json. The preview is free and needs no account.
The scanner's verdicts on this example, computed now from our copy of NVD.
CISA added nine Langflow, n8n and LiteLLM CVEs to its exploited list in 2026. The versions to run, the three bug patterns, and what to lock down.
Specs, power draw and which agent fits each host, compared side by side.
Pick the components you run. Every 6 hours PocketClaw matches new NVD entries against them and emails you, with an optional Discord or Slack webhook. Unlimited full scans are included.
€9 a month or €49 a year after the trial. Cancel any time. Single full scans are €1.99.
vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which revision of a model's dynamic processor code is…
The alert a Pro account watching vLLM gets for this CVE.
13 of the CVEs we track are on CISA's Known Exploited Vulnerabilities list. Patch these first.
| CVE-2025-68613 | n8n | Critical Remote Code Execution (RCE) in their workflow expression evaluation system. Fixed in 1.120.4, 1.121.1. | 9.9 |
| CVE-2026-9198 | Langflow | Lets unauthenticated attackers chain /api/v1/auto_login with /api/v1/validate/code. Fixed in 1.10.1. | 9.8 |
| CVE-2026-42208 | LiteLLM | A database query used during proxy API key checks mixed the caller-supplied key value. Fixed in 1.83.7. | 9.8 |
| CVE-2026-33017 | Langflow | The POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows. Fixed in 1.9.0. | 9.8 |
| CVE-2026-0770 | Langflow | Remote Code Execution via exec_globals | 9.8 |
What each batch of CVEs needs from the attacker, the fixed versions, and the settings that matter more than the patch.
Third-party add-ons around OpenClaw and Hermes Agent picked up CVEs in October 2026: an unauthenticated prompt-injection port, a skill that deletes your home directory, a config injection that runs shell commands.
NVD published 19 Open WebUI CVEs on 12 October 2026, all fixed in 0.11.4: session token theft from any website, terminal privilege escalation and stored XSS.
CVE-2026-103663 lets an unauthenticated caller of Ollama's /api/pull write files outside the model store and get code run as root. Upgrade to 0.35.0 and close port 11434.
All-time CVE count on NIST NVD, and how many are on CISA KEV. Each one has its own page.