Topic hub
AI Security
Protect AI systems from attacks, ensure data privacy, and implement secure AI practices.
All posts · 45
AI SECURITY01
n8n Security Vulnerabilities: Which of 58 Hit Your Setupn8n published 58 security advisories in six weeks, only 17 with a CVE. Map each to the config that exposes it, then run 1.123.83, 2.41.7 or 2.42.3.
AI SECURITY02
Open WebUI Vulnerabilities: Which Advisories Hit Your Setup53 Open WebUI advisories landed between July and September 2026, and 30 need a setting that ships off. Map each one to your config, then pin v0.11.4.
AI SECURITY03
NVIDIA Container Toolkit Security: 10 CVEs in 21 MonthsTen CVE records against the toolkit, six of them path-resolution bugs. CVE-2026-24260 sets the minimum at 1.19.1, and no release note or changelog says so.
AI SECURITY04
llama.cpp Server Security Hardening: 6 CVEs, No Fixed BuildSix llama.cpp CVEs published on 6 August 2026 carry an affected build range and no fixed build. b9058 is a test ceiling, not a version floor.
AI SECURITY05
AI Incident Reporting: Which Regulator Clock Starts FirstThe shortest EU incident deadline is four hours from classification, not 24 from awareness. NIS2 Article 4(1) switches itself off for financial entities.
AI SECURITY06
MLflow authorizes by dictionary lookup: 120 entries at v3.15.2, and a miss is a pass rather than a denial. Ten advisories in five months say the same thing.
AI SECURITY07
Ray Cluster Authentication: RAY_AUTH_MODE and Five CVEsRay had no authentication before 2.52.0 and still defaults to disabled in 2.58.0. Five CVEs set the version floor. What vLLM copies to workers.
AI SECURITY08
Triton Inference Server Security: 22 of 31 CVEs Are DoSNVIDIA's 2026 index lists 31 Triton CVEs: 22 are denial of service only, 6 list code execution, and the 26.06 floor shipped 53 days before its bulletin.
AI SECURITY09
Text-to-SQL Agent Permissions: The Role Is the BoundaryCOPY (SELECT 1) TO PROGRAM runs to completion inside BEGIN TRANSACTION READ ONLY on PostgreSQL 18.6. Only the database role refused every payload.