Vulnerabilities in Agent frameworks
Orchestration, tool-calling and workflow builders. 7 currently disclosed, newest first. Each links through to the merged record for that CVE.
- 9.0 Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted…
- 6.5 MLflow CrewAI autologging records LLM provider API keys in logged trace spans
- 7.1 Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
- 5.7 Strands Agents: Default FileSessionManager storage is world-readable on shared systems
- 9.8 Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`
- 8.6 Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
- — IBM Langflow Code Injection Vulnerability
Open this in the live dashboard
to filter further, or query it with search_cves over MCP.