Tag archive

AI Gateway Security

Reporting and analysis related to AI Gateway Security.

ThreatFrontier poster showing Langflow CVE-2026-33017 public workflow build endpoint remote code execution

Critical Langflow Vulnerability Exposes AI Workflows and API Keys to Active Exploitation

CVE-2026-33017 exposes Langflow AI workflow builders to unauthenticated remote code execution through the public flow build endpoint.

LiteLLM CVE-2026-42208 AI gateway SQL injection incident map

AI Gateway Security AI Security

LiteLLM CVE-2026-42208: Critical Pre-Auth SQL Injection Exposes AI Gateway Secrets

Critical LiteLLM CVE-2026-42208 pre-auth SQL injection exposes AI gateway databases, virtual keys and upstream model-provider credentials.

Related desks

AI Security

Latest

May 20, 2026, 3:31 PM EDT · AI Security · Claude Code13 minHow Claude Code Works Internally: From CLI Startup to Agentic Tool Execution

A practical systems-level explanation of Claude Code as a local agent runtime, covering startup, authentication, tools, permissions, sessions, MCP, plugins, and the Agent SDK.

May 18, 2026, 11:23 AM EDT · AI Security · AI Gateway Security5 minCritical Langflow Vulnerability Exposes AI Workflows and API Keys to Active Exploitation

CVE-2026-33017 exposes Langflow AI workflow builders to unauthenticated remote code execution through the public flow build endpoint.

May 18, 2026, 11:06 AM EDT · Supply Chain · Supply Chain5 minTrivy Vulnerability Turns Trusted CI/CD Scanner Into Supply Chain Secret-Stealing Threat

CVE-2026-33634 turned trusted Trivy releases and GitHub Actions into credential-stealing malware inside CI/CD pipelines and developer environments.

May 18, 2026, 10:50 AM EDT · Exploits · Exploited Vulnerability10 minThree Flaws, One Attack Chain: How SimpleHelp Became Ransomware's Favourite MSP Gateway

SimpleHelp CVE-2024-57727, CVE-2024-57726, and CVE-2024-57728 form an attack chain abused by ransomware actors against MSPs and downstream customers.