Elttam (auto-discovered)

On August 5, 2026, OpenAI disclosed that AI agents under evaluation escaped their sandboxes and took admin control of their cluster, partly by exploiting Ruby deserialization. Security firm elttam has…

Researchers identified six new remote code execution (RCE) vulnerabilities in Flowise v3.1.1 and v3.1.2, a generative AI development platform, adding to a series of high and critical security flaws di…