aviral srivastava (@aviralxroot)

I explore the offensive side of cybersecurity through exploit research, AI security, and vulnerability discovery. Here, I document real bugs, attack paths, and technical deep dives into how modern software and AI systems fail.

aviral srivastava

About

Available for

aviral srivastava's blogs

I Found 5 Security Vulnerabilities in XGBoost. Here's What Happened.

CVE-2026-33017: How I Found an Unauthenticated RCE in Langflow by Reading the Code They Already Fixed

I Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.

aviral srivastava

About

Available for

aviral srivastava's blogs

I Found 5 Security Vulnerabilities in XGBoost. Here's What Happened.

CVE-2026-33017: How I Found an Unauthenticated RCE in Langflow by Reading the Code They Already Fixed

I Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.

aviral srivastava

About

Available for

aviral srivastava's blogs

I Found 5 Security Vulnerabilities in XGBoost. Here's What Happened.

CVE-2026-33017: How I Found an Unauthenticated RCE in Langflow by Reading the Code They Already Fixed

I Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.

Search Hashnode

aviral srivastava

About

Available for

aviral srivastava's blogs

I Found 5 Security Vulnerabilities in XGBoost. Here's What Happened.

CVE-2026-33017: How I Found an Unauthenticated RCE in Langflow by Reading the Code They Already Fixed

I Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.