CRITICAL: Azure OpenAI had a CVSS 9.8 missing-auth flaw
Azure OpenAI CVE-2026-119990: Microsoft Discloses a CVSS 9.8 Missing-Auth Flaw, Already Mitigated
Wednesday, November 11, 2026i10X News · Section desk103 stories
Section
AI Security
Incidents, vulnerabilities and attacks involving AI models, agents and tools — newest first, updated hourly.
FilterCompanies & models
Incident feed
Vulnerabilities, breaches and attacks involving AI models, agents and tools — newest first. Updated hourly.
DANGER: Unpatched Langflow servers are being looted by an AI agent
VulnCheck: The Agentic Secret Hunter From Microsoft’s Report Also Broke Into Langflow
DANGER: Prefab UI’s sandbox was a CVSS 10.0 escape
Prefab UI CVE-2026-120338: A CVSS 10.0 Sandbox Escape in Model-Written Python
DANGER: Beta9 sandbox escapes let any tenant reach host root
Beta9 CVE-2026-120307: Three Critical Escapes From the Sandbox That Runs AI-Written Code
DANGER: A fake Claude Code extension tried to open SSH backdoors
Cursor Marketplace Served a Malicious Claude Code Extension With an SSH Backdoor
DANGER: NVIDIA NeMo Agent Toolkit had a CVSS 10.0 auth gap
NVIDIA NeMo Agent Toolkit CVE-2026-65145: A CVSS 10.0 Missing-Authentication Flaw
DANGER: An AI pentest agent helped breach ConnectWise tenants
Storm-0940 Used the ARTEX AI Agent in a ConnectWise Cloud Backup Supply-Chain Breach
DANGER: LiteLLM 1.107.0 wheels were a credential stealer
LiteLLM 1.107.0 Wheels Were Backdoored to Steal Credentials and Load Remote Code
· RSS