{ "name": "Developer and AI tools in CISA KEV", "description": "Entries in the CISA Known Exploited Vulnerabilities catalog for developer, AI, and self-hosted tools that are commonly run locally or shared through localhost tunnels.", "license": "CC-BY-4.0 (compilation); KEV entry text is a US government work", "publisher": "LayerV", "homepage": "https://layerv.ai/research/dev-tool-kev", "source": { "name": "CISA Known Exploited Vulnerabilities Catalog", "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", "catalogVersion": "2026.10.01", "dateReleased": "2026-10-01T19:54:04.9308Z", "catalogCount": 1731 }, "categories": { "dev-server": "Dev servers and frameworks", "ai-ml": "AI and ML tools", "self-hosted": "Self-hosted developer tools" }, "tools": [ { "id": "vite", "name": "Vite", "category": "dev-server", "entries": 1 }, { "id": "react-native-cli", "name": "React Native CLI", "category": "dev-server", "entries": 1 }, { "id": "react-server-components", "name": "React Server Components", "category": "dev-server", "entries": 1 }, { "id": "langflow", "name": "Langflow", "category": "ai-ml", "entries": 6 }, { "id": "n8n", "name": "n8n", "category": "ai-ml", "entries": 1 }, { "id": "ray", "name": "Ray", "category": "ai-ml", "entries": 1 }, { "id": "mlflow", "name": "MLflow", "category": "ai-ml", "entries": 1 }, { "id": "litellm", "name": "LiteLLM", "category": "ai-ml", "entries": 3 }, { "id": "jenkins", "name": "Jenkins", "category": "self-hosted", "entries": 6 }, { "id": "gitlab", "name": "GitLab", "category": "self-hosted", "entries": 5 }, { "id": "gitea", "name": "Gitea", "category": "self-hosted", "entries": 1 }, { "id": "grafana", "name": "Grafana", "category": "self-hosted", "entries": 2 }, { "id": "metabase", "name": "Metabase", "category": "self-hosted", "entries": 2 }, { "id": "airflow", "name": "Apache Airflow", "category": "self-hosted", "entries": 2 }, { "id": "mongo-express", "name": "mongo-express", "category": "self-hosted", "entries": 1 }, { "id": "gogs", "name": "Gogs", "category": "self-hosted", "entries": 1 }, { "id": "adminer", "name": "Adminer", "category": "self-hosted", "entries": 1 }, { "id": "superset", "name": "Apache Superset", "category": "self-hosted", "entries": 1 }, { "id": "phpmyadmin", "name": "phpMyAdmin", "category": "self-hosted", "entries": 1 } ], "addedByYear": { "2021": { "total": 2, "self-hosted": 2 }, "2022": { "total": 7, "self-hosted": 7 }, "2023": { "total": 1, "self-hosted": 1 }, "2024": { "total": 4, "self-hosted": 4 }, "2025": { "total": 5, "dev-server": 1, "self-hosted": 3, "ai-ml": 1 }, "2026": { "total": 19, "self-hosted": 6, "ai-ml": 11, "dev-server": 2 } }, "entries": [ { "cveID": "CVE-2026-85706", "tool": "gitlab", "vendorProject": "GitLab", "product": "Community Edition and Enterprise Edition", "vulnerabilityName": "GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability", "dateAdded": "2026-09-11", "shortDescription": "GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2026-59822", "tool": "litellm", "vendorProject": "BerriAI", "product": "LiteLLM", "vulnerabilityName": "BerriAI LiteLLM Improper Authentication Vulnerability", "dateAdded": "2026-09-02", "shortDescription": "BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2026-60004", "tool": "gitea", "vendorProject": "Gitea", "product": "Gitea", "vulnerabilityName": "Gitea Code Injection Vulnerability", "dateAdded": "2026-08-25", "shortDescription": "Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea service account.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2026-64849", "tool": "mlflow", "vendorProject": "MLflow", "product": "MLflow", "vulnerabilityName": "MLflow Server-Side Request Forgery Vulnerability", "dateAdded": "2026-08-19", "shortDescription": "MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2025-62593", "tool": "ray", "vendorProject": "Ray-Project", "product": "Ray", "vulnerabilityName": "Ray-Project Ray Code Injection Vulnerability", "dateAdded": "2026-08-17", "shortDescription": "Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2026-72898", "tool": "metabase", "vendorProject": "Metabase", "product": "Metabase", "vulnerabilityName": "Metabase SQL Injection Vulnerability", "dateAdded": "2026-08-11", "shortDescription": "Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance. From there, the attacker could change the application configuration, steal stored credentials for the connected databases, read any data accessible through those connections, and export data.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2026-9198", "tool": "langflow", "vendorProject": "IBM", "product": "Langflow", "vulnerabilityName": "IBM Langflow Code Injection Vulnerability", "dateAdded": "2026-08-04", "shortDescription": "Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2026-0770", "tool": "langflow", "vendorProject": "Langflow", "product": "Langflow", "vulnerabilityName": "Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability", "dateAdded": "2026-07-21", "shortDescription": "Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations. ", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2026-55255", "tool": "langflow", "vendorProject": "Langflow", "product": "Langflow", "vulnerabilityName": "Langflow Authorization Bypass Through User-Controlled Key Vulnerability", "dateAdded": "2026-07-07", "shortDescription": "Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2026-42271", "tool": "litellm", "vendorProject": "BerriAI", "product": "LiteLLM", "vulnerabilityName": "BerriAI LiteLLM Command Injection Vulnerability", "dateAdded": "2026-06-08", "shortDescription": "BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2025-34291", "tool": "langflow", "vendorProject": "Langflow", "product": "Langflow", "vulnerabilityName": "Langflow Origin Validation Error Vulnerability", "dateAdded": "2026-05-21", "shortDescription": "Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. This could allow the attacker to execute arbitrary code and achieve full system compromise via obtained tokens that permit access to authenticated endpoints.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2026-42208", "tool": "litellm", "vendorProject": "BerriAI", "product": "LiteLLM", "vulnerabilityName": "BerriAI LiteLLM SQL Injection Vulnerability", "dateAdded": "2026-05-08", "shortDescription": "BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2026-33017", "tool": "langflow", "vendorProject": "Langflow", "product": "Langflow", "vulnerabilityName": "Langflow Code Injection Vulnerability", "dateAdded": "2026-03-25", "shortDescription": "Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2025-68613", "tool": "n8n", "vendorProject": "n8n", "product": "n8n", "vulnerabilityName": "n8n Improper Control of Dynamically-Managed Code Resources Vulnerability", "dateAdded": "2026-03-11", "shortDescription": "n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for remote code execution.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2021-22175", "tool": "gitlab", "vendorProject": "GitLab", "product": "GitLab", "vulnerabilityName": "GitLab Server-Side Request Forgery (SSRF) Vulnerability", "dateAdded": "2026-02-18", "shortDescription": "GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2025-11953", "tool": "react-native-cli", "vendorProject": "React Native Community", "product": "CLI", "vulnerabilityName": "React Native Community CLI OS Command Injection Vulnerability", "dateAdded": "2026-02-05", "shortDescription": "React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute arbitrary shell commands with fully controlled arguments.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2021-39935", "tool": "gitlab", "vendorProject": "GitLab", "product": "Community and Enterprise Editions", "vulnerabilityName": "GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability", "dateAdded": "2026-02-03", "shortDescription": "GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API. ", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2025-31125", "tool": "vite", "vendorProject": "Vite", "product": "Vitejs", "vulnerabilityName": "Vite Vitejs Improper Access Control Vulnerability", "dateAdded": "2026-01-22", "shortDescription": "Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2025-8110", "tool": "gogs", "vendorProject": "Gogs", "product": "Gogs", "vulnerabilityName": "Gogs Path Traversal Vulnerability", "dateAdded": "2026-01-12", "shortDescription": "Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2025-55182", "tool": "react-server-components", "vendorProject": "Meta", "product": "React Server Components", "vulnerabilityName": "Meta React Server Components Remote Code Execution Vulnerability", "dateAdded": "2025-12-05", "shortDescription": "Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2025-66478 has been rejected, but it is associated with CVE-2025- 55182.", "knownRansomwareCampaignUse": "Known" }, { "cveID": "CVE-2021-43798", "tool": "grafana", "vendorProject": "Grafana Labs", "product": "Grafana", "vulnerabilityName": "Grafana Path Traversal Vulnerability", "dateAdded": "2025-10-09", "shortDescription": "Grafana contains a path traversal vulnerability that could allow access to local files.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2017-1000353", "tool": "jenkins", "vendorProject": "Jenkins", "product": "Jenkins", "vulnerabilityName": "Jenkins Remote Code Execution Vulnerability", "dateAdded": "2025-10-02", "shortDescription": "Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2021-21311", "tool": "adminer", "vendorProject": "Adminer", "product": "Adminer", "vulnerabilityName": "Adminer Server-Side Request Forgery Vulnerability", "dateAdded": "2025-09-29", "shortDescription": "Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive information.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2025-3248", "tool": "langflow", "vendorProject": "Langflow", "product": "Langflow", "vulnerabilityName": "Langflow Missing Authentication Vulnerability", "dateAdded": "2025-05-05", "shortDescription": "Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.", "knownRansomwareCampaignUse": "Known" }, { "cveID": "CVE-2021-41277", "tool": "metabase", "vendorProject": "Metabase", "product": "Metabase", "vulnerabilityName": "Metabase GeoJSON API Local File Inclusion Vulnerability", "dateAdded": "2024-11-12", "shortDescription": "Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2024-23897", "tool": "jenkins", "vendorProject": "Jenkins", "product": "Jenkins Command Line Interface (CLI)", "vulnerabilityName": "Jenkins Command Line Interface (CLI) Path Traversal Vulnerability", "dateAdded": "2024-08-19", "shortDescription": "Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.", "knownRansomwareCampaignUse": "Known" }, { "cveID": "CVE-2023-7028", "tool": "gitlab", "vendorProject": "GitLab", "product": "GitLab CE/EE", "vulnerabilityName": "GitLab Community and Enterprise Editions Improper Access Control Vulnerability", "dateAdded": "2024-05-01", "shortDescription": "GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2023-27524", "tool": "superset", "vendorProject": "Apache", "product": "Superset", "vulnerabilityName": "Apache Superset Insecure Default Initialization of Resource Vulnerability", "dateAdded": "2024-01-08", "shortDescription": "Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY according to installation instructions.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2015-5317", "tool": "jenkins", "vendorProject": "Jenkins", "product": "Jenkins User Interface (UI)", "vulnerabilityName": "Jenkins User Interface (UI) Information Disclosure Vulnerability", "dateAdded": "2023-05-12", "shortDescription": "Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the \"Fingerprints\" pages.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2021-39226", "tool": "grafana", "vendorProject": "Grafana Labs", "product": "Grafana", "vulnerabilityName": "Grafana Authentication Bypass Vulnerability", "dateAdded": "2022-08-25", "shortDescription": "Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2019-1003029", "tool": "jenkins", "vendorProject": "Jenkins", "product": "Script Security Plugin", "vulnerabilityName": "Jenkins Script Security Plugin Sandbox Bypass Vulnerability", "dateAdded": "2022-04-25", "shortDescription": "Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2009-1151", "tool": "phpmyadmin", "vendorProject": "phpMyAdmin", "product": "phpMyAdmin", "vulnerabilityName": "phpMyAdmin Remote Code Execution Vulnerability", "dateAdded": "2022-03-25", "shortDescription": "Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2019-1003030", "tool": "jenkins", "vendorProject": "Jenkins", "product": "Matrix Project Plugin", "vulnerabilityName": "Jenkins Matrix Project Plugin Remote Code Execution Vulnerability", "dateAdded": "2022-03-25", "shortDescription": "Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote code execution.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2018-1000861", "tool": "jenkins", "vendorProject": "Jenkins", "product": "Jenkins Stapler Web Framework", "vulnerabilityName": "Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability", "dateAdded": "2022-02-10", "shortDescription": "A code execution vulnerability exists in the Stapler web framework used by Jenkins", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2020-11978", "tool": "airflow", "vendorProject": "Apache", "product": "Airflow", "vulnerabilityName": "Apache Airflow Command Injection", "dateAdded": "2022-01-18", "shortDescription": "A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2020-13927", "tool": "airflow", "vendorProject": "Apache", "product": "Airflow's Experimental API", "vulnerabilityName": "Apache Airflow's Experimental API Authentication Bypass", "dateAdded": "2022-01-18", "shortDescription": "The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2019-10758", "tool": "mongo-express", "vendorProject": "MongoDB", "product": "mongo-express", "vulnerabilityName": "MongoDB mongo-express Remote Code Execution Vulnerability", "dateAdded": "2021-12-10", "shortDescription": "mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.", "knownRansomwareCampaignUse": "Unknown" }, { "cveID": "CVE-2021-22205", "tool": "gitlab", "vendorProject": "GitLab", "product": "Community and Enterprise Editions", "vulnerabilityName": "GitLab Community and Enterprise Editions Remote Code Execution Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.", "knownRansomwareCampaignUse": "Known" } ] }