Code Injection

CVE-2026-24155 allows local privilege escalation in NVIDIA's AI framework across Windows, Linux, and macOS. The CVSS 7.8 flaw affects multi-tenant ML environments where isolation is critical.

Critical code injection vulnerability CVE-2025-59528 in Flowise AI agent builder scores maximum CVSS 10.0 and is under active exploitation. Over 12,000 instances are publicly accessible.