Skip to content

NewPublic vulnerability findings and merged fixes across open-source repositories.Our open-source security work.See the research

Guides

Research you can trace to a fix

These notes come from published case studies in this repo. Reference docs live separately.

Open the docs Browse case studies

01
NVIDIA RAG Blueprint · CWE-22 path traversal
Path traversal in NVIDIA's RAG Blueprint MCP server
NVIDIA's RAG Blueprint shipped an MCP server that read user-supplied file paths with no validation. Any client could read arbitrary files and ingest them into the RAG collection.
Read the case study
02
Hugging Face Skills · CWE-89 SQL injection
Five SQL injection vectors in Hugging Face's skills framework
Hugging Face's skills repository let AI agents drive a DuckDB database through a thin Python wrapper that built every query with f-strings. One file held five injection vectors, each reachable from agent-influenced input.
Read the case study
03
RAGFlow · CWE-502 deserialisation
A pickle RCE footgun in RAGFlow's deserialiser
RAGFlow's deserialise_b64 helper chose bare pickle.loads behind a safety flag that was never set, so decoded database values were unpickled with no restrictions. Reading one crafted column could execute code inside the RAGFlow process.
Read the case study