This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+13 more
Summary
AI summaryUpdates v4.1.15] - 2026-06-25, f97d707, and 8e0d417 across a mixed release.
Full changelog
[v4.1.15] - 2026-06-25
Added
- API: Allow omitting model token in mcp_scan and ai_infra_scan, fall back to system default model (f97d707)
- Data: Add 6 llama.cpp CVE rules to the llama-cpp pack (8e0d417)
- MCP: Add 3 MCP threat detection rules: tool poisoning, credential exfiltration, command injection (de57b10)
Changed
- Docs: Add user feedback survey section to all README files (bf5ed72)
- Docs: Fix vuln total count 1300+ -> 1600+ in ai-infra-scan docs (98d4cd9)
- Docs: Update llama-cpp vuln count 3->9 and severity Low->Medium-High (e7b97bd)
- Docs: Add 9 new single-turn attack operators to AIG-PromptSecurity README (9d6a589)
- Docs: Update openclaw vuln count 628 -> 655 in ai-infra-scan docs (aba3988)
- Docs: Fix zh v4.1.14 wording: single-turn jailbreak operators -> attack methods (e3cf9a6)
- Docs: Remove v4.1.11 What's New entry from all 9 README languages (ec3557d)
- Docs: Add v4.1.14 What's New and restore v4.1.11 entry across all 9 README languages (2c662d0)
Contributors
Special thanks to @zhuque, @aigsec, @aigdocs[bot], @boyhack, @DevamShah, @aig-doc-bot, @Nicky, @Adam Lin
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About AI-Infra-Guard by Tencent Zhuque Lab
A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Related context
Related tools
Beta — feedback welcome: [email protected]