Case studies
Findings we have shipped upstream
Public, merged fixes in widely used open-source projects. The same research discipline is what we bring to client reviews under NDA.
Public fixes, written plainly
Each write-up names the project, the bug class, the fix and the upstream source.
AI infrastructure
April 2026
Path traversal in NVIDIA's RAG Blueprint MCP server
NVIDIA's RAG Blueprint shipped an MCP server that read user-supplied file paths with no validation. Any client could read arbitrary files and ingest them into the RAG collection.
- Severity
- High
- Class
- CWE-22
AI infrastructure
March 2026
Five SQL injection vectors in Hugging Face's skills framework
Hugging Face's skills repository let AI agents drive a DuckDB database through a thin Python wrapper that built every query with f-strings. One file held five injection vectors, each reachable from agent-influenced input.
- Severity
- High
- Class
- CWE-89
AI infrastructure
May 2026
A pickle RCE footgun in RAGFlow's deserialiser
RAGFlow's deserialise_b64 helper chose bare pickle.loads behind a safety flag that was never set, so decoded database values were unpickled with no restrictions. Reading one crafted column could execute code inside the RAGFlow process.
- Severity
- Medium
- Class
- CWE-502