Avi Lumelsky

AI Security Researcher

I'm a Security Researcher at Oligo Security. Currently working on securing AI Application infrastructure and uncovering key vulnerabilities in open-source AI projects.

GitHub LinkedIn Oligo Blog X/Twitter

Research & Talks

2024-2025

ShadowMQ - AI/ML Infrastructure Vulnerabilities

CVE-2025-60455: RCE in Modular Max Server
CVE-2025-30165: RCE in vLLM
CVE-2025-23254: RCE in NVIDIA TensorRT-LLM [CybersecurityNews]
CVE-2024-50050: Meta llama-stack RCE [The Hacker News]

2025

AirPlay Security

Talk: A Worm in the Apple: Wormable Zero-Click RCE in AirPlay (w/ Uri Katz, Gal Elbaz) - Black Hat USA 2025
Blog: Airborne: Wormable Zero-Click RCE in AirPlay Protocol [Wired]
Checker: Test Your Device for AirPlay Vulnerability

2025

CarPlay Security

Talk: Pwn My Ride: Jailbreaking Cars with CarPlay - DEF CON 33 / AppSec Village 2025
Blog: Pwn My Ride: Exploring the CarPlay Attack Surface [Wired]

2025

OpenAI Codex Supply Chain Research

2025

Application Attack Matrix

The Application Attack Matrix: Mapping the Modern Cloud Application Threat Landscape [CyberScoop] [Blog]

2025

Anthropic MCP Inspector

CVE: CVE-2025-49596 - RCE in Anthropic MCP Inspector [The Hacker News]
LinkedIn Post: Exposed API Tokens in .cursor/mcp.json Files

2024-2025

0.0.0.0 Day

Talks: BlueHat IL 2025 | DEF CON 32 / AppSec Village 2024
Blog: 0.0.0.0 Day: Exploiting Localhost APIs From the Browser [Fortbridge]
Related Research: Identify Website Users By Client Port Scanning Using WebAssembly And Go (2021)

2025

Shadow Vulnerabilities in AI

Talk: Shadow Vulnerabilities in AI/ML Data Stacks - CNCF
Blog: Shadow Vulnerabilities in AI: The Hidden Perils Beyond CVEs

2024

Ollama Vulnerabilities

CVEs: CVE-2024-39719/20/21/22
Blog: More Models, More ProbLLMs [The Hacker News]

2024

ShadowRay - First Known Attack on AI Infrastructure

Campaign: MITRE ATT&CK C0045 - Identified the first attack campaign targeting AI workloads in the wild
Blog: ShadowRay: First Known Attack Campaign Targeting AI Workloads [Forbes]
Checker: Test Your Ray Cluster for Vulnerabilities
Related Research: See also Shadow Vulnerabilities in AI and 0.0.0.0 Day research above

2024

TensorFlow

TensorFlow Keras Downgrade Attack: CVE-2024-3660 Bypass

2023-2025

eBPF Security

Podcast: Interview with Avi Lumelsky, AI Security Researcher at Oligo Security - eBPFChirp FM (Oct 2025)
Talk: Scaling Runtime Application Security with eBPF - BSides Budapest 2024
Talk: Secimport: Tailor-Made eBPF Sandbox for Python Applications - PyCon Israel 2024
Blogs: App-Level eBPF Applications | Secure PyTorch Models with eBPF | Secure FastAPI with eBPF

2023

ShellTorch / PyTorch

Talk: ShellTorch: The Next Evolution in *4Shell Executions - CNCF
Blog: ShellTorch Explained: Multiple Vulnerabilities in PyTorch Model Server

2020-2022

Cloud/Privacy Research

2021-2024

Side Projects & Other

Agent with minimal dependencies - LangTalks Webinar 2024
Infery: Run Deep Learning Inference with Only 3 Lines of Python Code (2021)