--- title: "aviral srivastava (@aviralxroot) | Hashnode" description: "Offensive AI Security & Exploit Development. Read the latest articles by aviral srivastava on Hashnode." url: "https://hashnode.com/@aviralxroot" --- @aviralxroot # aviral srivastava @aviralxroot · Sunnyvale, USA · Joined March 2026 Offensive AI Security & Exploit Development ### [I Found 5 Security Vulnerabilities in XGBoost. Here's What Happened.](https://aviraxroot.hashnode.dev/i-found-5-security-vulnerabilities-in-xgboost-here-s-what-happened?utm_source=hashnode&utm_medium=feed) 5 vulnerabilities across memory safety, deserialization, and auth. Zero patches. But XGBoost published its first security page because of my research. 10 min read · [aviraxroot.hashnode.dev](https://aviraxroot.hashnode.dev/i-found-5-security-vulnerabilities-in-xgboost-here-s-what-happened?utm_source=hashnode&utm_medium=feed) [Mar 29](https://hashnode.com/posts/i-found-5-security-vulnerabilities-in-xgboost-here-s-what-happened/69c8db407816e434a007e33e) ### [CVE-2026-33017: How I Found an Unauthenticated RCE in Langflow by Reading the Code They Already Fixed](https://aviraxroot.hashnode.dev/cve-2026-33017-how-i-found-an-unauthenticated-rce-in-langflow-by-reading-the-code-they-already-fixed?utm_source=hashnode&utm_medium=feed) How I found a Critical RCE in Langflow by checking the code path that the previous CISA KEV fix missed. One curl request, no auth, full compromise. 9 min read · [aviraxroot.hashnode.dev](https://aviraxroot.hashnode.dev/cve-2026-33017-how-i-found-an-unauthenticated-rce-in-langflow-by-reading-the-code-they-already-fixed?utm_source=hashnode&utm_medium=feed) [Mar 19](https://hashnode.com/posts/cve-2026-33017-how-i-found-an-unauthenticated-rce-in-langflow-by-reading-the-code-they-already-fixed/69bbcf228c55d6eefbccbc2d) ### [I Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.](https://aviraxroot.hashnode.dev/sql-injection-in-an-ai-agent-cve-2026-32628?utm_source=hashnode&utm_medium=feed) How a 56,000-star open source LLM app forgot to parameterize its queries, and why that matters way more than you think. 13 min read · [aviraxroot.hashnode.dev](https://aviraxroot.hashnode.dev/sql-injection-in-an-ai-agent-cve-2026-32628?utm_source=hashnode&utm_medium=feed) [Mar 16](https://hashnode.com/posts/sql-injection-in-an-ai-agent-cve-2026-32628/69b759f4f4eb2f8b041ac4aa)