Security flaws in popular AI tools have nearly tripled — BirdyFoot Research

Researchers at BirdyFoot analyzed security advisories for seventeen popular open-source AI tools and found that reported flaws nearly tripled in 2026 compared to the previous year. Critical vulnerabilities, which frequently allowed unauthorized code execution or server control, were concentrated heavily within a small group of widely deployed tools such as Open WebUI and Flowise. Open article →