data-leak
12 live · 116 on record · last incident 1 day ago
Live12
- liveClaude Code + SDKs Stolen Claude API keys turn Claude Code into a remote implant
Research · since 12 Nov 2026
Darktrace researchers demonstrated how stolen API keys can turn Claude Code into a remote implant. The technique abuses the memory stores feature and Files API to exfiltrate data while disguising traffic as normal coding agent activity.
AI - liveGrok Over 35,000 Grok-built Apps Exposed, Leaking Confidential Data and Passwords
Breaches & attacks · Real loss · since 10 Nov 2026
Security firm Claroc discovered that 35,578 of 37,571 Grok-built applications were publicly accessible without authentication. Approximately one in ten of these apps exposed internal business information and passwords, creating a large-scale data breach.
Do:Secure the exposed applications, restrict access, and rotate any leaked credentials
- liveRAG SNAPRAG: Cost-efficient knowledge extraction attack on RAG systems via adversarial perturbations
Research · since 10 Nov 2026
Researchers demonstrated SNAPRAG, an attack utilizing adversarial perturbations to extract private knowledge bases from retrieval-augmented generation deployments. The method reconstructs stored documents using significantly fewer queries and lower computational resources than existing extraction techniques.
Do:Deploy query rate limiting and monitor repeated semantic queries across external knowledge retrieval pipelines.
AI - liveSGLang SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents
Breaches & attacks · Exploited · since 8 Nov 2026
An attacker exploited an RCE vulnerability in SGLang to breach NEAR AI inference servers and access active requests. The incident resulted in data leakage affecting multiple user agents and requests.
AI - liveClaude Code + SDKs Claude Code Inadvertently Leaks Credentials to Public Repositories
Research · since 10 Nov 2026
Researchers demonstrated that an AI coding tool command accidentally saves files containing credentials to public repositories. Organizations utilizing the tool face potential exposure of sensitive internal data.
Do:Review public repositories for accidentally committed credential files created by development tools.
AI - livePro-Russian hackers leak personal data of Italian Foreign Minister and European officials
Breaches & attacks · Real loss · since 7 Nov 2026
Pro-Russian hackers published personal data of Italian Foreign Minister Antonio Tajani and other senior European officials on the dark web, and offered cryptocurrency bounties for more. Prime Minister Giorgia Meloni blamed pro-Russian hackers for the leak.
- liveChatGPT Researchers bypass OpenAI ChatGPT Lockdown Mode protections
Patch now · Disclosed · Patched · since 5 Nov 2026
Researchers disclosed a patched vulnerability in OpenAI ChatGPT that bypassed Lockdown Mode protections. The flaw could have been exploited to silently exfiltrate chat data without user interaction.
Do:Update ChatGPT to the latest version to ensure Lockdown Mode protections are active.
AI - liveAmadeus IT Group reservation systems Multiple Asian Airlines Report Data Breaches Following Amadeus IT Hack
Breaches & attacks · Real loss · since 4 Nov 2026
Major airlines including Japan Airlines and Cathay Pacific disclosed data breaches traced back to a cyberattack on Spanish IT provider Amadeus. The incident impacted flight reservation, ticketing, and check-in platforms.
- liveMicrosoft SQL Server Philippine Overseas Employment Administration Data Leaked in Breach
Breaches & attacks · Real loss · since 4 Nov 2026
An unknown threat actor exfiltrated 69GB of SQL Server backups from the Philippine Overseas Employment Administration. The breach compromised personal data belonging to migrant workers.
- liveChainstack infrastructure Chainstack Discloses Production Systems Breach Exposing Customer Data
Breaches & attacks · Real loss · since 3 Nov 2026
Blockchain infrastructure provider Chainstack disclosed that an unauthorized party accessed parts of its infrastructure. The breach exposed customer data and password hashes.
- livemedical AI agents Silent PHI Leakage by Medical AI Agents Demonstrated via Canary Embedding
Research · since 3 Nov 2026
Researchers demonstrate that medical AI agents can retrieve patient identifiers without revealing them, enabling silent access to protected health information. The attack uses embedded canaries in synthetic records and is shown across multiple language models, highlighting a data‑leak vulnerability.
Do:Monitor AI agent outputs for unauthorized data retrieval and enforce strict data‑minimization controls.
AI - liveChatGPT ChatGPT Share Link Vulnerability Allowed Code Execution and Data Access
Patch now · Disclosed · Patched · since 18 Oct 2026
A vulnerability in ChatGPT shared links allowed attackers to execute code within a victim's active session and read private chat logs. OpenAI patched the issue eight days after disclosure and rated it as high priority.
Do:Ensure ChatGPT is updated to the latest version.
AI
Earlier104
- closed6.9vLLM CVE-2026-126395: vLLM information disclosure vulnerability in sanitize_message()
Patch now · Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126395
AI - closedMicrosoft 365 Agents SDK CVE-2026-109485 Microsoft 365 Agents SDK Information Disclosure Vulnerability
Patch now · Disclosed · since 10 Nov 2026 · CVE-2026-109485
AI - closed5.3NVIDIA NeMo CVE-2026-100962: NVIDIA NeMo Export-Deploy SSRF Vulnerability
Patch now · Disclosed · since 10 Nov 2026 · CVE-2026-100962
AI - closedAnswer-Only Disclosure: Private-Context LLM Assistance over Web APIs
Research · since 30 Oct 2026
AI - closed6.5Langflow CVE-2026-77817: IBM Langflow OSS Information Disclosure Vulnerability
Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-77817
AI - closedWarp agentic development environment Warp discloses breach exposing AI agent logs and telemetry data
Breaches & attacks · Exploited · since 27 Oct 2026
AI - closed8.8vLLM CVE-2026-116176: vLLM server-side request forgery leads to NCCL unique_id and KV-cache leakage
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116176
AI - closedGPT-5.6-Sol Agent Mosaic: Confidentiality Leaks in Agentic LLM Systems
Research · since 23 Oct 2026
AI - closedAfterDeleteBench AfterDeleteBench: Auditing Post-Deletion Information Persistence in LLM Agents
Research · since 23 Oct 2026
AI - closedThreat Actor Used AI to Plan and Execute Cybercrime Activities
Breaches & attacks · Exploited · since 21 Oct 2026
AI - closedRAGLeak RAGLeak: Supply-Chain Privacy Backdoors in Retrieval-Augmented Generation
Research · since 20 Oct 2026
AI - closedOpenCode OpenCode Security Breach Exposes API Keys During Distillation Attacks
Breaches & attacks · Exploited · since 19 Oct 2026
AI - closedOpenCode Console OpenCode Console Breach Exposes Third-Party AI Provider API Keys
Breaches & attacks · Exploited · since 16 Oct 2026
AI - closedAI agents CERT-In Reports AI Agents Accessed Sensitive Data at Organizations During Testing
Patch now · Exploited · since 15 Oct 2026 · updated 16 Oct 2026
AI - closed7.1Open WebUI CVE-2026-109293: Open WebUI Tool Source Code Information Disclosure
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109293
AI - closed5.3Open WebUI CVE-2026-109287: Open WebUI knowledge base authorization flaw exposes folder metadata
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109287
AI - closed6.5obsidian-tc CVE-2026-77364: Information disclosure vulnerability in obsidian-tc MCP server
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-77364
AI - closed8.1Langflow CVE-2026-103360: IBM Langflow OSS path limitation vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-103360
AI - closed6.5Langflow CVE-2026-93448: IBM Langflow OSS path traversal information disclosure
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93448
AI - closed5.5Weaviate Verba CVE-2026-105145: Information disclosure vulnerability in Weaviate Verba
Patch now · Disclosed · since 4 Oct 2026 · CVE-2026-105145
AI - closedGitHub AI Coding Agents Exposed Internal Images and Data on Public GitHub Repos
Breaches & attacks · Real loss · since 29 Sep 2026
AI - closed5.3LightRAG CVE-2026-85709: LightRAG Information Disclosure via Raw Exception Text
Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-85709
AI - closedpublic AI tool Johns Hopkins Bayview Employee Uploaded Patient Data to Unapproved AI Tool
Breaches & attacks · Real loss · since 21 Sep 2026
- closedZCode AI ZCode AI Coding Assistant Reportedly Uploaded Local Code Repositories Without Consent
Patch now · Disclosed · since 18 Sep 2026
AI - closed7.7Langflow CVE-2026-19306: IBM Langflow OSS arbitrary file read and data exfiltration
Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-19306
AI - closed7.7Langflow CVE-2026-19304: IBM Langflow OSS URL parser discrepancy information disclosure
Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-19304
AI - closed8.2Langflow CVE-2026-18904: Information disclosure and message injection in IBM Langflow OSS
Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-18904
AI - closed8.2GitLab AI Gateway CVE-2026-19889: Model request redirection vulnerability in GitLab AI Gateway
Patch now · Disclosed · since 27 Aug 2026 · CVE-2026-19889
AI - closed7.1Flowise CVE-2026-73604: Incomplete credential redaction in Flowise API
Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73604
AI - closed5.3vLLM CVE-2026-73555: Information disclosure vulnerability in vLLM request validation handling
Patch now · Disclosed · since 13 Aug 2026 · updated 4 Sep 2026 · CVE-2026-73555
AI - closed6.5llama.cpp Out-of-Bounds Read in llama.cpp Slot Save Directory
Patch now · Disclosed · since 6 Aug 2026 · CVE-2026-43630
AI - closed6.5Langflow CVE-2026-10128: Environment variable exposure vulnerability in IBM Langflow OSS
Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-10128
AI - closed7.1Langflow IBM Langflow OSS authorization bypass in MemoryComponent leads to chat history exposure
Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-9130
AI - closed8.3Flowise CVE-2026-70473: Flowise Information Disclosure via Upsert History
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70473
AI - closedFlowise Flowise incomplete credential redaction exposes secrets
Patch now · Disclosed · since 4 Aug 2026
AI - closed5.3Open WebUI CVE-2026-70487: Open WebUI unauthorized knowledge file access vulnerability
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70487
AI - closed7.5ComfyUI + custom nodes CVE-2026-56673: ComfyUI Path Traversal and File Exfiltration Flaw
Patch now · Disclosed · since 31 Jul 2026 · CVE-2026-56673
AI - closed5.7Amazon Bedrock AgentCore CVE-2026-15737: AWS Bedrock AgentCore SDK logs sensitive user prompts
Patch now · Disclosed · since 16 Jul 2026 · CVE-2026-15737
AI - closed7.5vllm-orchestrator-gateway CVE-2026-15574: vllm-orchestrator-gateway Logs Sensitive Bearer Tokens and Chat Content
Patch now · Disclosed · since 13 Jul 2026 · CVE-2026-15574
AI - closed6.0Open WebUI Open WebUI channel members endpoint exposes sensitive credentials
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59222
AI - closed3.5Open WebUI CVE-2026-59213: Open WebUI cross-user model-list exposure via static cache key
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59213
AI - closedHermes Suspected Hackers Used AI Agents to Compromise Taiwanese Systems
Breaches & attacks · Real loss · since 1 Jul 2026
AI - closed7.5Ollama CVE-2026-5757: Ollama model quantization engine information disclosure vulnerability
Patch now · Disclosed · since 26 Jun 2026 · CVE-2026-5757
AI - closed4.3LiteLLM CVE-2026-12799: LiteLLM UI User Enumeration Leads to Information Disclosure
Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12799
AI - closed6.9Flowise CVE-2026-56267: Flowise information exposure vulnerability in forgot-password endpoint
Patch now · Disclosed · since 20 Jun 2026 · CVE-2026-56267
AI - closed5.3vLLM CVE-2026-54236: vLLM Incomplete Fix Leaks PIL Repr Addresses
Patch now · Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-54236
AI - closed9.1Claude Code + SDKs CVE-2026-54316: Claude Code Out-of-Band Data Exfiltration via WebFetch
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54316
AI - closed7.5vLLM CVE-2026-53923: vLLM GGUF Dequantization Kernel Information Disclosure
Patch now · Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-53923
AI - closed9.6LibreChat CVE-2026-32625: LibreChat MCP Server Environment Variable Exfiltration Vulnerability
Patch now · Disclosed · since 2 Jun 2026 · CVE-2026-32625
AI - closed8.2CodexBar CodexBar Session Cookie Leakage via Insecure Redirects
Patch now · Disclosed · since 1 Jun 2026 · CVE-2026-43625
AI - closed4.3AnythingLLM AnythingLLM Authentication Flaw Permits Unauthorized Workspace Access
Patch now · Disclosed · since 28 May 2026 · CVE-2026-47713
AI - closed7.0Flowise CVE-2026-46443: FlowiseAI Vulnerable to Credential Data Leak
Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46443
AI - closed5.3Open WebUI CVE-2026-45397: Open WebUI Unauthenticated RAG Config Disclosure
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45397
AI - closed4.3AnythingLLM CVE-2026-42456: Insecure direct object reference in AnythingLLM tts endpoint
Patch now · Disclosed · since 8 May 2026 · CVE-2026-42456
AI - closed3.7Flowise CVE-2026-8028: Information disclosure vulnerability in FlowiseAI Flowise
Patch now · Disclosed · since 6 May 2026 · CVE-2026-8028
AI - closed6.3Flowise Flowise API response handler exposes bcrypt password hashes
Patch now · Disclosed · since 6 May 2026 · CVE-2026-8026
AI - closed8.6NVIDIA NemoClaw NVIDIA NeMoClaw sandbox initialization access control vulnerability
Patch now · Disclosed · since 28 Apr 2026 · CVE-2026-24222
AI - closed5.3Flowise CVE-2026-56270: Flowise Unauthenticated Information Disclosure of OAuth Secrets
Patch now · Disclosed · since 16 Apr 2026 · updated 24 Jun 2026 · CVE-2026-56270
AI - closed7.7Flowise CVE-2026-41266: Flowise Sensitive Data Leak in Chatbot Config
Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41266
AI - closed8.2Flowise CVE-2026-41273: Flowise OAuth 2.0 Access Token Disclosure
Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41273
AI - closedMCP SDKs Credential Exfiltration via Remote Poisoned MCP Tool
Research · since 1 Apr 2025
AI - closedMCP servers & tools Postmark MCP Server Package Hijacked for Email Exfiltration
Supply chain · Exploited · since Sep 2025 (approx.)
AI - closedMeta internal AI agent Meta Internal AI Agent Expose Sensitive Data via Advice
Patch now · Exploited · since 18 Mar 2026
AI - closed7.1MCP SDKs CVE-2026-25536: Model Context Protocol SDK cross-client data leak
Patch now · Disclosed · since 4 Feb 2026 · CVE-2026-25536
AI - closedMoltbook Moltbook Database Exposure Leaks User Communications and API Tokens
Breaches & attacks · Exploited · since 31 Jan 2026
AI - closedCursor Data Exfiltration via MCP Server Prompt Injection Targeting Cursor
Research · since 24 Jun 2025
AI - closed7.5Copilot Studio CVE-2026-21520: Microsoft Copilot Studio Information Disclosure
Patch now · Disclosed · since 22 Jan 2026 · CVE-2026-21520
AI - closed5.3Claude Code + SDKs CVE-2026-21852: Claude Code Data Leak via Malicious Config
Patch now · Disclosed · since 21 Jan 2026 · CVE-2026-21852
AI - closed8.8Langflow CVE-2026-21445: Langflow Missing Authentication on Critical API Endpoints
Patch now · Disclosed · since 2 Jan 2026 · CVE-2026-21445
AI - closedClaude Anthropic Claude Jailbroken and Used in Mexican Government Data Theft
Breaches & attacks · Real loss · since 1 Dec 2025
AI - closedSecret Desires Secret Desires AI Platform Exposes Two Million Sensitive Images in Storage Leak
Breaches & attacks · Real loss · since 19 Nov 2025
AI - closedSlack AI Data Exfiltration from Slack AI via Indirect Prompt Injection
Research · since 20 Aug 2024
AI - closedCopilot Studio Data Exfiltration via Prompt Injections in Copilot Studio Agent
Research · since Jun 2025 (approx.)
AI - closed3.5LiteLLM CVE-2025-11203: LiteLLM information disclosure vulnerability in health endpoint
Patch now · Disclosed · since 29 Oct 2025 · CVE-2025-11203
AI - closed6.5AgentAPI CVE-2025-59956: AgentAPI Client-Side DNS Rebinding Data Exfiltration Flaw
Patch now · Disclosed · since 30 Sep 2025 · CVE-2025-59956
AI - closed9.6Flowise CVE-2025-59434: Cross-tenant environment variable exposure in Flowise Cloud
Patch now · Disclosed · since 22 Sep 2025 · CVE-2025-59434
AI - closedClaude Code + SDKs Malicious Nx npm Packages Weaponize AI Coding Agents for Exfiltration
Breaches & attacks · Exploited · since 21 Aug 2025
AI - closed8.2Microsoft 365 Copilot CVE-2025-53787: Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
Patch now · Disclosed · since 7 Aug 2025 · CVE-2025-53787
AI - closed6.5Microsoft 365 Copilot CVE-2025-53774: Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
Patch now · Disclosed · since 7 Aug 2025 · CVE-2025-53774
AI - closedChatGPT Multiple LLM Platforms Expose Thousands of Conversations via Share Links
Breaches & attacks · Exploited · since 31 Jul 2025
AI - closedChatGPT CISA Acting Director Uploaded Sensitive Documents to Public ChatGPT
Breaches & attacks · Exploited · since 15 Jul 2025
AI - closed9.3MCP servers & tools CVE-2025-34072: Data exfiltration vulnerability in Anthropic Slack MCP Server
Patch now · Disclosed · since 2 Jul 2025 · CVE-2025-34072
AI - closedServiceaide AI Platform Serviceaide AI Infrastructure Exposure Leaks Patient Data
Breaches & attacks · Real loss · since 9 May 2025
AI - closed7.5vLLM CVE-2025-30202: Data Exposure via ZeroMQ in Multi-Node vLLM Deployment
Patch now · Disclosed · since 29 Apr 2025 · updated 30 Apr 2025 · CVE-2025-30202
AI - closedGoogle Bard Google Bard Conversation Exfiltration via Indirect Prompt Injection
Research · since 23 Nov 2023
AI - closedllama.cpp Misconfigured Llama.cpp Servers Expose Sensitive User Prompts
Breaches & attacks · Exploited · since 11 Apr 2025
AI - closedGenNomis GenNomis AI database exposes 100,000 synthetic and nudify images publicly
Research · since 31 Mar 2025
AI - closedKaikatsu Frontier server Teen Uses AI-Generated Program to Breach Kaikatsu Frontier
Breaches & attacks · Exploited · since 18 Jan 2025
AI - closedMeta AI Meta AI Vulnerability Allowed Unauthorized Access to Prompts
Patch now · Disclosed · since 26 Dec 2024
AI - closed7.5Ollama CVE-2024-39719: Ollama file existence disclosure via api/create route
Patch now · Disclosed · since 31 Oct 2024 · CVE-2024-39719
AI - closed4.3Gradio CVE-2024-47168: Gradio monitoring endpoint accessible when disabled
Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47168
AI - closed7.4Copilot Studio CVE-2024-43610: Microsoft Copilot Studio information disclosure
Patch now · Disclosed · since 9 Oct 2024 · CVE-2024-43610
AI - closedAI Call Center Platform AI Call Center Platform Breach Exposes 10 Million Conversations
Breaches & attacks · Exploited · since 8 Oct 2024
AI - closed5.7Lobe Chat CVE-2024-37895: Lobe Chat API key leak vulnerability
Patch now · Disclosed · since 17 Jun 2024 · CVE-2024-37895
AI - closed9.6AnythingLLM CVE-2024-0765: AnythingLLM Data Exfiltration Vulnerability
Patch now · Disclosed · since 3 Mar 2024 · CVE-2024-0765
AI - closedChatGPT ChatGPT Account Compromise Leads to Exposure of Private Chat Logs
Breaches & attacks · Exploited · since 30 Jan 2024
AI - closed9.6Gradio CVE-2023-6572: Information exposure vulnerability in Gradio
Patch now · Disclosed · since 14 Dec 2023 · CVE-2023-6572
AI - closedChatGPT ChatGPT Conversation Exfiltration via Indirect Prompt Injection
Research · since May 2023 (approx.)
AI - closedBing Chat Bing Chat Data Exfiltration via Indirect Prompt Injection
Research · since 2023 (approx.)
AI - closedAzure Storage Accidental Exposure of 38TB of Data by Microsoft AI Research
Breaches & attacks · Exploited · since 22 Jun 2023
AI - closedClearview AI Facial Recognition Tool Clearview AI code repository misconfiguration exposes production credentials and video samples
Breaches & attacks · Exploited · since 2020 (approx.)
AI - closedChatGPT ChatGPT Bug Exposes User Chat Histories and Payment Data
Breaches & attacks · Real loss · since 20 Mar 2023
AI - closedChatGPT Samsung Source Code and Meeting Records Disclosed via ChatGPT Ingestion
Breaches & attacks · Real loss · since 11 Mar 2023
AI - closed6.3Gradio CVE-2023-25823: Gradio exposes private SSH keys in share links
Patch now · Disclosed · since 23 Feb 2023 · CVE-2023-25823
AI