A real-time, data-driven look at the vulnerability landscape for AI agents, LLMs, and MCP. Tracked from CISA KEV and NVD feeds, filtered for what actually matters to teams shipping agents in production.
Data updated daily · 5:50 AM CTThe tracked total mixes the cumulative CISA KEV catalog with a date-windowed NVD pull. 0 of the 0 come from KEV.
AI/agent-relevant CVEs broken down by category over the tracking window.
Retrieval-augmented generation vulnerabilities dominate our feed — 0 of 0 tracked CVEs. If you connect an agent to a vector database or knowledge base, that retrieval layer is the most likely place an injection lands.
Model Context Protocol and agent tooling account for 0 CVEs. Every tool your agent can call is a potential privilege boundary, and MCP tool-abuse vectors are the ones teams most often miss.
0 AI/agent-relevant entries sit in CISA's known-exploited catalog. When a vulnerability is in KEV, it's being actively exploited in the wild — not theoretical. That's the number to watch for urgency.
| CVE | Date | Category |
|---|---|---|
CVE-2026-70619 | 2026-08-04 | RAG |
CVE-2026-45538 | 2026-08-04 | MCP / Agent |
CVE-2026-70477 | 2026-08-04 | Prompt Injection |
CVE-2026-70478 | 2026-08-04 | LLM |
CVE-2026-70492 | 2026-08-04 | RAG |
CVE-2026-67979 | 2026-08-04 | RAG |
CVE-2026-47682 | 2026-08-04 | RAG |
CVE-2026-70474 | 2026-08-04 | RAG |
CVE-2026-70486 | 2026-08-04 | RAG |
CVE-2026-70485 | 2026-08-04 | RAG |
Full dataset tracked locally. This page shows the most recent high-signal entries.
This is the industry picture. The only way to know your own exposure is to test it — against the same attack classes driving these CVEs.
Book a Free 15-Min Audit → Or run your system prompt through the free AI System Prompt Scanner