The ecosystem, right now.
New CVEs from NIST NVD across 20 self-hosted AI components, and the GitHub activity of the agents we follow. Nothing on this page is typed by hand.
2098
CVEs tracked
178
new in 30 days
13
critical in 30 days
13
exploited in the wild
last 7 days
All CVEsNew CVEs
CVE-2026-119978high 8.5Flowise: Sandbox escape vulnerability that lets authenticated users execute OS commandsFlowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and…30 Oct 2026CVE-2026-119557medium 5.9n8n: Path traversal in the Databricks noden8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary…30 Oct 2026CVE-2026-119408high 8.8n8n: Remote code execution in deprecated Functionn8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and…30 Oct 2026CVE-2026-93680critical 9.8Langflow: Authentication bypass via improper authenticationIBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.29 Oct 2026CVE-2026-90991medium 6.5Langflow: Authenticated denial of service via allocation of resources without limitsIBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to allocation of resources without limits or…29 Oct 2026CVE-2026-77819medium 6.5Langflow: Authenticated overwrite arbitrary files via path traversalIBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper limitation of a pathname to a…29 Oct 2026CVE-2026-77817medium 6.5Langflow: Authenticated information disclosure (exposure of sensitive information)IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper sanitization of secrets…29 Oct 2026CVE-2026-18894medium 6.5Langflow: Trigger pre-existing stored Python component code in a public workflow, executing itIBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it…29 Oct 2026CVE-2026-110309high 8.8Langflow: Authenticated OS command execution via improper control of code generationIBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper control of code generation.29 Oct 2026CVE-2026-110245high 7.5Langflow: Information disclosure via improper authenticationIBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication.29 Oct 2026CVE-2026-110244high 8.8Langflow: Authenticated information disclosure via path traversalIBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a…29 Oct 2026CVE-2026-110200medium 6.5Langflow: Authenticated information disclosure via cleartext storage of sensitive informationIBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive…29 Oct 2026CVE-2026-110196high 8.8Langflow: Could allow a remote attacker with a low-privileged authenticated account (missing authorization)IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction…29 Oct 2026CVE-2026-110193high 8.8Langflow: Could allow a remote attacker with a low-privileged authenticated account (code injection)IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or…29 Oct 2026CVE-2026-110192medium 6.5Langflow: Authenticated information disclosure via insufficiently protected credentialsIBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.29 Oct 2026
GitHub
snapshot 2026-11-02 12:00Agent activity
OpenClaw
Latest release v2026.10.9 (2026-10-29)
393,701 stars·4,880 open issues·2,787 open PRs
Hermes Agent
Latest release v0.22.5 (2026-10-23)
259,661 stars·18,128 open issues·34,215 open PRs
Nanobot
Latest release v0.4.0 (2026-10-28)
49,755 stars·217 open issues·651 open PRs
ZeroClaw
Latest release v0.8.7 (2026-10-27)
33,098 stars·705 open issues·435 open PRs
NanoClaw
Latest release v2026.10.0 (2026-10-09)
31,071 stars·293 open issues·745 open PRs
IronClaw
Latest release ironclaw-v1.4.1 (2026-09-29)
12,705 stars·1,370 open issues·199 open PRs
Moltworker
No tagged release
9,944 stars·61 open issues·33 open PRs
Most recent release: OpenClaw v2026.10.9 on 2026-10-29
Want the CVEs that touch your stack sent to you instead? Scan your stack for free or turn on Pro alerts.