Critical Severity
CVE-2024-3400
Published: Nov 13, 2026
Local security intelligence for CVE triage and remediation. 46 data sources and 42 tools, risk scores, fix plans for what you run, and an MCP server for AI agents, all in native Rust. Private by default.
<h1 align="center">CVE Intel</h1>
<p align="center">
Know which vulnerabilities matter, and what to do about them.<br/>
A private desktop app for vulnerability triage and scanning, written in native Rust, with a CLI, REST API and MCP server for developers and AI agents.<br/>
42 MCP tools, 46 data sources, SBOMs in and out, on-device AI.
</p>
<p align="center">
<a href="https://www.rust-lang.org"><img src="https://img.shields.io/badge/Rust-native-orange?style=flat-square&logo=rust" alt="Rust"/></a>
<a href="https://tauri.app"><img src="https://img.shields.io/badge/Tauri-2-blue?style=flat-square" alt="Tauri 2"/></a>
<a href="https://modelcontextprotocol.io"><img src="https://img.shields.io/badge/MCP-Compatible-blue?style=flat-square" alt="MCP compatible"/></a>
<a href="#license"><img src="https://img.shields.io/badge/License-MIT%20OR%20Apache--2.0-green?style=flat-square" alt="License: MIT OR Apache-2.0"/></a>
</p>
<p align="center">
<a href="#what-is-cve-intel">What it is</a> ·
<a href="#getting-started">Getting started</a> ·
<a href="#features">Features</a> ·
<a href="#install">Install</a> ·
<a href="#local-ai">Local AI</a> ·
<a href="#data-sources">Data sources</a> ·
<a href="#developer-notes">Developer notes</a> ·
<a href="#citing-and-attribution">Citing</a>
</p>
<p align="center">
<a href="assets/core-functions-demo.mp4"><img src="assets/core-functions-demo.webp" width="900" alt="Sped-up screen recording of CVE Intel on macOS: the threat landscape, CVE Triage of CVE-2024-3400 and recording a decision, the decision ledger with stale, expired and review-due examples, a dependency scan with attack chains and a CycloneDX SBOM, and the watchlist"/></a>
</p>
<p align="center"><sub>Sped-up demo on macOS (<a href="assets/core-functions-demo.mp4">1080p video</a>): the threat landscape, triage and recording a decision, the decision ledger, a scan with attack chains and an SBOM, and the watchlist.</sub></p>
## What is CVE Intel?
Every