PROTECT AI’S NOVEMBER VULNERABILITY REPORT

Summary from the TLDR InfoSec newsletter

Since August 2023, members of the Huntr bug bounty platform for AI and ML have uncovered over a dozen vulnerabilities exposing AI/ML models to system takeover and sensitive information theft. Some of the tools count with hundreds of thousands or millions of downloads per month, such as H2O-3, MLflow, and Ray. These issues potentially impact the entire AI/ML supply chain.