Nessus 的 Artificial Intelligence 系列

ID名称严重性
370288Dia 浏览器扩展枚举 (Windows)
info
370287已安装 Dia Browser (Windows)
info
366537已安装 Bolt.diy (Windows)
info
366536已安装 Docker Model Runner (Windows)
info
366459已安装 Bolt.diy (macOS)
info
366458已安装 Bolt.diy (Linux)
info
366442已安装 Docker Model Runner (Linux)
info
366441已安装 Docker Model Runner (macOS)
info
366439已安装 Onyx AI (Windows)
info
366438已安装 Onyx AI (macOS)
info
366436已安装 Onyx AI (Linux)
info
366383vLLM 检测
info
366382已安装 Hugging Face Hub (Windows)
info
366381已安装 Hugging Face Hub (macOS)
info
366336已安装 Hugging Face Hub (Linux)
info
365564ModelScope MS-Agent 1.5.1 < 1.6.0 命令注入 (CVE-2026-2256)
medium
364697安装了 ModelScope MS-Agent (Linux / Unix)
info
364696安装了 ModelScope MS-Agent (Windows)
info
364361LiteLLM < 1.84.0 不当认证漏洞 (GHSA-7488-6r32-c95q)
high
363842vLLM 0.8.3 < 0.14.1 信息泄露 (GHSA-4r2x-xpjr-7cvv)
critical
362512Dia 浏览器扩展枚举 (macOS)
info
362511已安装 Dia Browser (macOS)
info
362510增加已安装的 Auggie CLI (Windows)
info
362509增加已安装的 Auggie CLI (macOS)
info
362501The Browser Company Arc 扩展枚举 (Windows)
info
362500安装了 The Browser Company Arc (Windows)
info
362499Opera Neon 扩展枚举 (macOS)
info
362498已安装 Opera Neon (macOS)
info
362490增加已安装的 Auggie CLI (Linux)
info
362489The Browser Company Arc 扩展枚举 (macOS)
info
362488已安装 The Browser Company Arc (macOS)
info
344295LangChain-Core < 0.3.81 / 1.x < 1.2.5
high
342143Ray < 2.52.0 远程代码执行 (CVE-2025-62593)
critical
342127Codeium Windsurf 路径遍历漏洞 (CVE-2025-62353)
critical
338765MLflow < 3.15.0 SSRF (CVE-2026-64849)
critical
334531Langflow < 1.3.0 未经身份验证的代码注入 RCE (CVE-2025-3248)(直接检查)
critical
334530Langflow validate/code exec() 远程代码执行 (CVE-2026-0770)(直接检查)
critical
334529Langflow auto_login + validate/code 链未经身份验证的 RCE (CVE-2026-9198)(直接检查)
critical
326243Langflow < 1.9.2 多个漏洞
critical
326242Langflow < 1.9.0 缺少授权 (CVE-2026-33760)
high
326241Langflow < 1.9.1 多个漏洞
critical
326240Langflow < 1.0.19 DoS (CVE-2026-55446)
high
324969Cursor < 3.0 多个沙盒逃逸
critical
324116LiteLLM 检测
info
324115LiteLLM 1.74.2 < 1.83.7 命令注入漏洞 (GHSA-v4p8-mg3p-g94g)
high
322798已安装 Cline (macOS)
info
322754LangChain < 1.3.9 路径遍历 (CVE-2026-55443)
medium
322723已安装字节跳动 Trae 扩展 (Linux)
info
322367已安装 Microsoft Visual Studio Code 扩展 (Linux)
info
322227已安装字节跳动 Trae 扩展 (macOS)
info