https://exploit-radar.com/en/flux/categories/ia.xml Exploit Radar: AI and automation The latest additions to CISA’s catalog of exploited vulnerabilities in the “AI and automation” category (indicative classification). 2026-09-02T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-49869/ CVE-2026-49869 — Kestra OSS 2026-09-02T00:00:00Z Apply the patches or mitigations from Kestra; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 2, 2026. https://exploit-radar.com/en/cve/CVE-2026-59822/ CVE-2026-59822 — BerriAI LiteLLM 2026-09-02T00:00:00Z Apply the patches or mitigations from BerriAI; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on September 2, 2026. https://exploit-radar.com/en/cve/CVE-2026-64849/ CVE-2026-64849 — MLflow 2026-08-19T00:00:00Z Apply the patches or mitigations from MLflow; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on August 19, 2026. https://exploit-radar.com/en/cve/CVE-2025-62593/ CVE-2025-62593 — Ray 2026-08-17T00:00:00Z Apply the patches or mitigations from Ray; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 17, 2026. https://exploit-radar.com/en/cve/CVE-2026-9198/ CVE-2026-9198 — Langflow 2026-08-04T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 4, 2026. https://exploit-radar.com/en/cve/CVE-2026-0770/ CVE-2026-0770 — Langflow 2026-07-21T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 21, 2026. https://exploit-radar.com/en/cve/CVE-2026-55255/ CVE-2026-55255 — Langflow 2026-07-07T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 7, 2026. https://exploit-radar.com/en/cve/CVE-2026-42271/ CVE-2026-42271 — BerriAI LiteLLM 2026-06-08T00:00:00Z Apply the patches or mitigations from BerriAI; if none are available, stop using the product. For cloud services, follow the guidance from BerriAI. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2026. https://exploit-radar.com/en/cve/CVE-2025-34291/ CVE-2025-34291 — Langflow 2026-05-21T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. For cloud services, follow the guidance from Langflow. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 21, 2026. https://exploit-radar.com/en/cve/CVE-2026-42208/ CVE-2026-42208 — BerriAI LiteLLM 2026-05-08T00:00:00Z Apply the patches or mitigations from BerriAI; if none are available, stop using the product. For cloud services, follow the guidance from BerriAI. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on May 8, 2026. https://exploit-radar.com/en/cve/CVE-2026-39987/ CVE-2026-39987 — Marimo 2026-04-23T00:00:00Z Apply the patches or mitigations from Marimo; if none are available, stop using the product. For cloud services, follow the guidance from Marimo. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 23, 2026. https://exploit-radar.com/en/cve/CVE-2026-33017/ CVE-2026-33017 — Langflow 2026-03-25T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. For cloud services, follow the guidance from Langflow. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2026. https://exploit-radar.com/en/cve/CVE-2025-68613/ CVE-2025-68613 — n8n 2026-03-11T00:00:00Z Apply the patches or mitigations from n8n; if none are available, stop using the product. For cloud services, follow the guidance from n8n. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on March 11, 2026. https://exploit-radar.com/en/cve/CVE-2025-3248/ CVE-2025-3248 — Langflow 2025-05-05T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. For cloud services, follow the guidance from Langflow. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on May 5, 2025. https://exploit-radar.com/en/cve/CVE-2020-13927/ CVE-2020-13927 — Apache Airflow 2022-01-18T00:00:00Z Apply the security update from Apache. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on January 18, 2022. https://exploit-radar.com/en/cve/CVE-2020-11978/ CVE-2020-11978 — Apache Airflow 2022-01-18T00:00:00Z Apply the security update from Apache. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on January 18, 2022.