AI-Application — PoC Archivehttps://poc.intelseclab.com/tags/ai-application/Latest proof-of-concept entries.Hugoen-usFri, 03 Jul 2026 00:00:00 +0000Langflow Missing-Authentication Remote Code Execution (CVE-2025-3248)https://poc.intelseclab.com/pocs/web/2026-07-03_cve-2025-3248-langflow-unauth-rce/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_cve-2025-3248-langflow-unauth-rce/Critical severity (CVSS 9.8) — web · CVE-2025-3248. Status: Weaponized. Affects: Langflow (open-source AI/LLM workflow builder). Tags: RCE, unauthenticated, missing-authentication, Langflow, AI-application, python-exec, CISA-KEV, agentic-ransomware, JADEPUFFER.webCriticalRCEunauthenticatedmissing-authenticationLangflowAI-applicationpython-execCISA-KEVagentic-ransomwareJADEPUFFERAuthenticated Command Injection in LiteLLM MCP Test Endpoints (CVE-2026-42271)https://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-42271-litellm-mcp-command-injection/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-42271-litellm-mcp-command-injection/High severity (CVSS 8.7) — web · CVE-2026-42271. Status: PoC. Affects: BerriAI LiteLLM (proxy) — MCP preview/test endpoints. Tags: command-injection, LiteLLM, MCP, AI-application, ai-gateway, authenticated, api-key, subprocess.webHighcommand-injectionLiteLLMMCPAI-applicationai-gatewayauthenticatedapi-keysubprocessClaude Desktop Cowork VM Image Integrity Bypass / Local Persistence (CVE-2026-7574)https://poc.intelseclab.com/pocs/binary/2026-06-30_cve-2026-7574-claude-desktop-cowork-vm-bypass/Tue, 30 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-06-30_cve-2026-7574-claude-desktop-cowork-vm-bypass/High severity (CVSS 8.7) — binary · CVE-2026-7574. Status: PoC. Affects: Anthropic Claude Desktop — Cowork feature. Tags: LPE, persistence, VM-integrity, rootfs, Claude, AI-application, macOS, ext4, integrity-bypass, Shell.binaryHighLPEpersistenceVM-integrityrootfsClaudeAI-applicationmacOSext4integrity-bypassShell