RHSA-2026:82059
Vulnerability from csaf_redhat - Published: 2026-10-13 06:58 - Updated: 2026-10-14 15:16Summary
Red Hat Security Advisory: Red Hat AI Inference 3.5.2 (ROCm)
Severity
Critical
Notes
Topic: Red Hat AI Inference 3.5.2 (ROCm) is now available.
Details: Red Hat AI Inference
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
CWE-121 - Stack-based Buffer OverflowAffected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed against such a database, an attacker can cause process crashes, memory exhaustion, or achieve arbitrary code execution, potentially compromising the system.
7.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processing. Successful exploitation of this vulnerability can lead to a crash of the application or allow for arbitrary code execution.
7.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in the `tarfile.extractall()` function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside the intended destination directory. This could lead to out-of-destination file reads or writes, potentially resulting in information disclosure or arbitrary file modification.
7.3 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.
7.1 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.
5.9 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of unauthorized commands. This could lead to arbitrary code execution on the affected system.
7.3 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition patterns. If a user opens this repository and triggers a specific function, the crafted patterns are unsafely processed, potentially allowing the attacker to execute unauthorized commands on the user's system.
7.3 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a sibling Python package. This could lead to a complete compromise of the user's system.
7.3 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.
7.1 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in Linux-PAM's `pam_userdb` module. This vulnerability, categorized as an Observable Timing Discrepancy (CWE-208), allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during plaintext password comparison, an attacker can deduce the password. This flaw is exploitable when the `pam_userdb` module is configured to store and compare credentials in plaintext, which is not a default setting.
4.8 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by tricking a user into loading a specially crafted spell file. When the user invokes spell suggestion, the editor attempts to process the malicious file, leading to an out-of-bounds write that corrupts memory and causes the application to crash, resulting in a denial of service.
7.3 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A memory corruption flaw in Vim allows an attacker to cause a Denial of Service (DoS). When a SOFO-based spell language is active, providing an excessively long word to the spell checker triggers a stack out-of-bounds write in the spell_soundfold_sofo() function, causing the editor to crash.
4.7 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware.
7.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
7.3 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.
5.9 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in Vim, an open-source command-line text editor. The PHP omni-completion script improperly handles specially crafted input. When a victim opens a malicious PHP file and invokes omni-completion, an unescaped class or trait name can be interpreted as Ex commands. This allows a remote attacker to achieve arbitrary operating-system command execution.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A command injection vulnerability in Vim's C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in OpenSSH. A remote attacker could exploit a use-after-free vulnerability on the client side when a server changes its host key during a key re-exchange. This could lead to high impact on confidentiality and integrity, and low impact on availability.
7.7 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in FFmpeg, a widely used multimedia framework. This vulnerability, a heap buffer overflow in the VobSub subtitle demuxer, allows a remote attacker to corrupt memory. By providing a specially crafted subtitle file, an attacker can trigger unbounded writes, which could lead to arbitrary code execution in applications that use FFmpeg's VobSub demuxer. This could allow an attacker to take control of the affected system.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in FFmpeg. A remote attacker can exploit an infinite loop vulnerability in the RTP/ASF demuxer by sending a specially crafted stream. This vulnerability occurs because the rtp_asf_fix_header function does not properly validate the size of data chunks, preventing the processing loop from advancing. Successful exploitation leads to CPU exhaustion, causing a Denial of Service (DoS) for legitimate users.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in FFmpeg. A remote attacker can exploit a heap out-of-bounds write vulnerability within the `vf_hqdn3d` filter by providing a specially crafted video file. When filtergraph reinitialization is disabled, the filter allocates undersized memory buffers for video frames. Subsequent larger frames can cause the application to write beyond these allocated boundaries, leading to heap memory corruption. This can result in arbitrary code execution or a denial of service.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF (Core Audio Format) file. This malicious file manipulates the bytes_per_packet value, leading to an undersized memory allocation and a heap out-of-bounds write. This vulnerability could allow an attacker to execute arbitrary code on the affected system.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in vLLM, an inference and serving engine for large language models. An attacker can exploit this by submitting specially crafted video requests that force the use of the PyNvVideoCodec GPU decoder. This bypasses the engine's static GPU memory reservation, allowing the attacker to exhaust shared GPU memory. The consequence is a denial of service (DoS), leading to request failures or worker crashes.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in vLLM. An authenticated API client can exploit derender endpoints by providing oversized GenerateResponse objects. These endpoints process the objects without enforcing output bounds or response-size limits. This can lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS).
4.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in Tesseract, an open-source Optical Character Recognition (OCR) engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract's deserializer processes this component during OCR recognition, an unchecked integer multiplication can occur, leading to an undersized buffer and a heap out-of-bounds write. This vulnerability could result in a denial of service or potentially arbitrary code execution.
7.1 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the set_sofo() function fails to reset internal data between sections, leading to an out-of-bounds write.
7.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimball#RmVimball() function.
7.3 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A vulnerability in Vim's shell script plugins (sh.vim, zsh.vim, ps1.vim) allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters.
7.3 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw in Vim's netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in vLLM, an inference and serving engine for large language models. Unauthenticated attackers can send malformed JSON requests to various API endpoints, triggering validation errors. The system's error handling mechanism converts these validation errors into strings without properly sanitizing traceback-style file paths. This vulnerability allows for the disclosure of sensitive internal system information, including the operating system username, home and virtual environment paths, Python version, internal package structure, and handler function names.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in vLLM, an inference and serving engine for large language models. An unauthenticated remote attacker can exploit a Regular Expression Denial of Service (ReDoS) vulnerability in the lm-format-enforcer backend. By submitting a specially crafted regular expression through the structured_outputs.regex parameter, the attacker can cause the system to consume excessive CPU resources. This leads to a denial of service, stalling the structured-output engine and preventing legitimate requests from being processed.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in vLLM, an inference and serving engine for large language models. An incomplete remediation for a previous vulnerability (CVE-2025-62164) can be bypassed. This occurs when concurrent prompt parts are processed, leading to a race condition in the handling of sparse tensors. This vulnerability could allow an attacker to cause a denial of service.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in vLLM, an inference and serving engine for large language models. An integer overflow vulnerability in the `act_and_mul_kernel` kernel allows a remote attacker to cause cross-user data leakage. By crafting specific requests processed in the same inference batch, an attacker can obtain a partial or complete copy of another user's inference result. This could lead to the unauthorized disclosure of sensitive information.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in vLLM, an inference and serving engine for large language models. An authenticated API client can exploit this vulnerability by sending a single request to the /v1/completions endpoint with an excessively large list of prompts. This unbounded input causes the vLLM server to allocate a disproportionate amount of CPU, memory, and other resources, leading to a Denial of Service (DoS) condition. This can disrupt or starve other services sharing the same vLLM instance.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in vLLM, an inference and serving engine for large language models. The MiMoV2OmniMultiModalProcessor component improperly handles attacker-controlled image and audio strings, bypassing security protections. This vulnerability allows a remote attacker to perform Server-Side Request Forgery (SSRF) and read arbitrary local files accessible to the vLLM process. Successful exploitation could lead to unauthorized access to internal network resources, cloud metadata, and sensitive local system files.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in HTTPX2, a Python HTTP client. A remote attacker could exploit this vulnerability by sending specially crafted multipart/form-data requests. The `FileField.render_headers()` function fails to validate `Content-Type` values and custom headers, allowing the injection of Carriage Return (CR) or Line Feed (LF) characters. This could lead to the injection of arbitrary part headers, potentially altering the interpretation of multipart data or bypassing security checks by a downstream parser.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in HTTPX2, a Python HTTP client. The `Request._prepare()` function can incorrectly add a `Content-Length` header to a request that already includes a `Transfer-Encoding` header. This conflict in HTTP framing headers can lead to request smuggling or connection desynchronization. This could allow an attacker to bypass security controls or interfere with network traffic.
5.6 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in httpx2, a Python HTTP client. The content decoders in httpx2 fully inflate compressed network chunks (such as gzip, deflate, br, or zstd) before yielding bounded pieces to the application. This can lead to a small compressed chunk expanding significantly in memory, for example, a 64 KiB chunk expanding to approximately 64 MiB. A remote attacker, by controlling or compromising a server, could exploit this vulnerability to cause severe memory pressure or out-of-memory process termination, leading to a Denial of Service (DoS) for applications using httpx2.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy's TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in urllib3. A malicious server can trigger a Denial of Service (DoS) by returning a specially crafted compressed response containing trailing bytes. When streaming the response in chunks, the decompression logic can enter an infinite loop by repeatedly processing unconsumed data without making progress. This issue leads to excessive CPU utilization and prevents the affected network request from completing.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in PyJWT. A remote attacker can trigger a Denial of Service (DoS) through outbound request amplification by submitting tokens containing unknown key identifiers. Because the library does not cache lookup failures or enforce a minimum refresh interval when fetching signing keys, each invalid key identifier forces a new request to the remote JSON Web Key Set (JWKS) server. This allows an attacker to exhaust network resources and overwhelm the configured authentication endpoints.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in PyJWT. When processing a JSON Web Token (JWT) prior to signature verification, the parser fails to properly handle deeply nested data, leading to an unhandled recursion error. A remote unauthenticated attacker could exploit this flaw by submitting a specially crafted token, causing the application to raise an unexpected server exception and resulting in a Denial of Service (DoS).
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in PyJWT. An unauthenticated remote attacker could trigger a Denial of Service (DoS) condition by supplying a specially crafted JSON Web Token (JWT) with deeply nested headers during decoding. Processing these nested structures causes an uncaught recursion error that bypasses standard error handling, leading to request-level failures and potential application crashes.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in pyjwt. A remote attacker can forge authentication tokens and bypass security controls by signing tokens with an empty key. When verifying tokens against a JSON Web Key (JWK) set that contains an empty Hash-based Message Authentication Code (HMAC) key, the library fails to enforce key-length validation. This allows an attacker to generate valid tokens carrying arbitrary claims to gain unauthorized access.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in PyJWT. When retrieving cryptographic keys from a JSON Web Key Set (JWKS) endpoint, PyJWKClient fails to validate HTTP redirect destinations against trusted domain boundaries. A remote attacker who can influence the response of a trusted endpoint can redirect key requests to an untrusted server, allowing the client to accept forged verification keys or potentially exposing sensitive credentials.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.
9.1 (Critical)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Critical
A flaw was found in PyJWT. When decoding JSON Web Token (JWT) signature segments, the library accepts characters outside the standard Base64URL encoding format. A remote attacker can exploit this issue by appending extra characters to a valid token signature, creating an alternate token representation that decodes to the identical signature. Consequently, this can allow an attacker to bypass raw-token revocation checks or blocklists that rely on exact string matching.
4.8 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in PyJWT. An attacker can cause a Denial of Service (DoS) by providing crafted certificate-like input containing repeated start markers without matching end markers. This malformed input triggers excessive regular expression backtracking during validation in the is_pem_format function, consuming high central processing unit (CPU) resources and potentially making the application unresponsive.
4.4 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules (DER) format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code (HMAC) operations. If an application supports both asymmetric and symmetric signing algorithms, a remote attacker knowing the public key can exploit this flaw to forge valid authentication tokens and bypass access controls.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key (JWK) parser fails to normalize Unicode byte-order marks (BOM). In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to misidentify the public key as a shared symmetric secret. This flaw allows an attacker to forge authenticated JSON Web Tokens (JWT) and bypass authentication controls.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Important
A flaw was found in pyjwt. The library fails to properly handle errors when parsing a JSON Web Key (JWK) set that contains a malformed RSA key alongside valid keys. A remote attacker can supply or inject a malformed key to abort the processing of the entire key set, resulting in authentication failures and a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in PyJWT. When importing an Octet Key Pair (OKP) private JSON Web Key (JWK), the library does not verify that the public key component matches the private key component. In applications that accept private key parameters from proof headers, a remote attacker can exploit this discrepancy to bypass token verification and use a stolen sender-constrained token without possessing the legitimate private key.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in pyjwt. This vulnerability allows a remote attacker to bypass token validation checks when an application reuses an options configuration across multiple token decoding requests. Because the library unintentionally modifies the caller's shared configuration dictionary when signature verification is disabled, subsequent token verifications may retain disabled claim checks. As a result, an attacker could supply an expired or otherwise invalid JSON Web Token (JWT) that the application accepts as valid.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
A flaw was found in multidict. The multidict C extension fails to release object references during certain items-view union and subtraction operations. An attacker could exploit this vulnerability by supplying crafted input sequences to applications performing these operations, triggering uncollectable memory leaks. This issue can cause unbounded process memory growth, ultimately leading to a Denial of Service (DoS).
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2025-6170
Threats
Impact
Moderate
References
473 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat AI Inference 3.5.2 (ROCm) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat AI Inference",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:82059",
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-6170",
"url": "https://access.redhat.com/security/cve/CVE-2025-6170"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-101917",
"url": "https://access.redhat.com/security/cve/CVE-2026-101917"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-101918",
"url": "https://access.redhat.com/security/cve/CVE-2026-101918"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102265",
"url": "https://access.redhat.com/security/cve/CVE-2026-102265"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102266",
"url": "https://access.redhat.com/security/cve/CVE-2026-102266"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102267",
"url": "https://access.redhat.com/security/cve/CVE-2026-102267"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102268",
"url": "https://access.redhat.com/security/cve/CVE-2026-102268"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102269",
"url": "https://access.redhat.com/security/cve/CVE-2026-102269"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102270",
"url": "https://access.redhat.com/security/cve/CVE-2026-102270"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102271",
"url": "https://access.redhat.com/security/cve/CVE-2026-102271"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102272",
"url": "https://access.redhat.com/security/cve/CVE-2026-102272"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102273",
"url": "https://access.redhat.com/security/cve/CVE-2026-102273"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102274",
"url": "https://access.redhat.com/security/cve/CVE-2026-102274"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102275",
"url": "https://access.redhat.com/security/cve/CVE-2026-102275"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-103001",
"url": "https://access.redhat.com/security/cve/CVE-2026-103001"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-104874",
"url": "https://access.redhat.com/security/cve/CVE-2026-104874"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11822",
"url": "https://access.redhat.com/security/cve/CVE-2026-11822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11824",
"url": "https://access.redhat.com/security/cve/CVE-2026-11824"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11940",
"url": "https://access.redhat.com/security/cve/CVE-2026-11940"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15588",
"url": "https://access.redhat.com/security/cve/CVE-2026-15588"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-16118",
"url": "https://access.redhat.com/security/cve/CVE-2026-16118"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44431",
"url": "https://access.redhat.com/security/cve/CVE-2026-44431"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47162",
"url": "https://access.redhat.com/security/cve/CVE-2026-47162"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47167",
"url": "https://access.redhat.com/security/cve/CVE-2026-47167"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-52858",
"url": "https://access.redhat.com/security/cve/CVE-2026-52858"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54369",
"url": "https://access.redhat.com/security/cve/CVE-2026-54369"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54411",
"url": "https://access.redhat.com/security/cve/CVE-2026-54411"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55693",
"url": "https://access.redhat.com/security/cve/CVE-2026-55693"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-57455",
"url": "https://access.redhat.com/security/cve/CVE-2026-57455"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-57456",
"url": "https://access.redhat.com/security/cve/CVE-2026-57456"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58010",
"url": "https://access.redhat.com/security/cve/CVE-2026-58010"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58011",
"url": "https://access.redhat.com/security/cve/CVE-2026-58011"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58012",
"url": "https://access.redhat.com/security/cve/CVE-2026-58012"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58013",
"url": "https://access.redhat.com/security/cve/CVE-2026-58013"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58014",
"url": "https://access.redhat.com/security/cve/CVE-2026-58014"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58015",
"url": "https://access.redhat.com/security/cve/CVE-2026-58015"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59856",
"url": "https://access.redhat.com/security/cve/CVE-2026-59856"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59858",
"url": "https://access.redhat.com/security/cve/CVE-2026-59858"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-60002",
"url": "https://access.redhat.com/security/cve/CVE-2026-60002"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-64830",
"url": "https://access.redhat.com/security/cve/CVE-2026-64830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-64834",
"url": "https://access.redhat.com/security/cve/CVE-2026-64834"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66036",
"url": "https://access.redhat.com/security/cve/CVE-2026-66036"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66039",
"url": "https://access.redhat.com/security/cve/CVE-2026-66039"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-69147",
"url": "https://access.redhat.com/security/cve/CVE-2026-69147"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-71486",
"url": "https://access.redhat.com/security/cve/CVE-2026-71486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73066",
"url": "https://access.redhat.com/security/cve/CVE-2026-73066"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73072",
"url": "https://access.redhat.com/security/cve/CVE-2026-73072"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73076",
"url": "https://access.redhat.com/security/cve/CVE-2026-73076"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73077",
"url": "https://access.redhat.com/security/cve/CVE-2026-73077"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73078",
"url": "https://access.redhat.com/security/cve/CVE-2026-73078"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73555",
"url": "https://access.redhat.com/security/cve/CVE-2026-73555"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73556",
"url": "https://access.redhat.com/security/cve/CVE-2026-73556"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73557",
"url": "https://access.redhat.com/security/cve/CVE-2026-73557"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73558",
"url": "https://access.redhat.com/security/cve/CVE-2026-73558"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73559",
"url": "https://access.redhat.com/security/cve/CVE-2026-73559"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73560",
"url": "https://access.redhat.com/security/cve/CVE-2026-73560"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84379",
"url": "https://access.redhat.com/security/cve/CVE-2026-84379"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84380",
"url": "https://access.redhat.com/security/cve/CVE-2026-84380"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84382",
"url": "https://access.redhat.com/security/cve/CVE-2026-84382"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97687",
"url": "https://access.redhat.com/security/cve/CVE-2026-97687"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97688",
"url": "https://access.redhat.com/security/cve/CVE-2026-97688"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97689",
"url": "https://access.redhat.com/security/cve/CVE-2026-97689"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://www.redhat.com/en/products/ai/inference-server",
"url": "https://www.redhat.com/en/products/ai/inference-server"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82059.json"
}
],
"title": "Red Hat Security Advisory: Red Hat AI Inference 3.5.2 (ROCm)",
"tracking": {
"current_release_date": "2026-10-14T15:16:00+00:00",
"generator": {
"date": "2026-10-14T15:16:00+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:82059",
"initial_release_date": "2026-10-13T06:58:22+00:00",
"revision_history": [
{
"date": "2026-10-13T06:58:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-13T06:58:27+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-14T15:16:00+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AI Inference Server 3.5",
"product": {
"name": "Red Hat AI Inference Server 3.5",
"product_id": "Red Hat AI Inference Server 3.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ai_inference_server:3.5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat AI Inference Server"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64",
"product": {
"name": "registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64",
"product_id": "registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vllm-rocm-rhel9@sha256%3Afad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e?arch=amd64\u0026repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9\u0026tag=1791425869"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64 as a component of Red Hat AI Inference Server 3.5",
"product_id": "Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
},
"product_reference": "registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64",
"relates_to_product_reference": "Red Hat AI Inference Server 3.5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Ahmed Lekssays"
]
}
],
"cve": "CVE-2025-6170",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2025-06-16T05:33:22.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2372952"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the severity of this vulnerability as Low, since it affects only the interactive shell mode of the xmllint tool and requires a user to manually run the tool and enter or receive specially crafted input. The exploitation requires local access and a highly specific usage scenario that is uncommon in typical environments. While it can cause a crash, the impact is limited to availability, and exploitation is unlikely in real-world deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-6170"
},
{
"category": "external",
"summary": "RHBZ#2372952",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2372952"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-6170",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6170"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/941",
"url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/941"
}
],
"release_date": "2025-06-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to a widespread installation base, or stability. It is strongly recommended to apply the upstream patch once available.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 2.5,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling"
},
{
"cve": "CVE-2026-11822",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-06-09T20:01:15.006955+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SQLite\u0027s FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed against such a database, an attacker can cause process crashes, memory exhaustion, or achieve arbitrary code execution, potentially compromising the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the SQLite FTS5 full-text search extension can lead to arbitrary code execution or denial of service. Exploitation requires an application to process a specially crafted SQLite database containing malformed FTS5 page data, which could occur if an attacker provides a malicious database to a vulnerable application. This risk is elevated in scenarios where applications handle untrusted SQLite database files.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11822"
},
{
"category": "external",
"summary": "RHBZ#2487258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11822"
},
{
"category": "external",
"summary": "https://sqlite.org/releaselog/3_53_2.html",
"url": "https://sqlite.org/releaselog/3_53_2.html"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/061febcf41ca",
"url": "https://sqlite.org/src/info/061febcf41ca"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/4a5ad516ea93",
"url": "https://sqlite.org/src/info/4a5ad516ea93"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension",
"url": "https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension"
}
],
"release_date": "2026-06-09T19:08:31.019000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data"
},
{
"cve": "CVE-2026-11824",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-06-09T20:02:19.874232+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487269"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processing. Successful exploitation of this vulnerability can lead to a crash of the application or allow for arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in SQLite\u0027s FTS5 full-text search extension can lead to arbitrary code execution or application crashes due to a heap-based buffer overflow. Exploitation requires an attacker to provide a specially crafted SQLite database, which must then be processed by an application compiled with FTS5 support. While requiring user interaction and local access, the potential for full impact on system resources justifies the Important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11824"
},
{
"category": "external",
"summary": "RHBZ#2487269",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487269"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11824",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11824"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11824",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11824"
},
{
"category": "external",
"summary": "https://sqlite.org/releaselog/3_53_2.html",
"url": "https://sqlite.org/releaselog/3_53_2.html"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/061febcf41ca",
"url": "https://sqlite.org/src/info/061febcf41ca"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/4a5ad516ea93",
"url": "https://sqlite.org/src/info/4a5ad516ea93"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate",
"url": "https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate"
}
],
"release_date": "2026-06-09T19:21:42.603000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5"
},
{
"cve": "CVE-2026-11940",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-23T17:05:33.822236+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491848"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `tarfile.extractall()` function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside the intended destination directory. This could lead to out-of-destination file reads or writes, potentially resulting in information disclosure or arbitrary file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products that appear in dependency searches under names containing \"tarfile\" but that are not the CPython standard-library tarfile module are not affected by this flaw. Matches such as the Go packages under github.com/containers/image / go.podman.io/image (.../docker/tarfile and .../docker/internal/tarfile) and the Apache Camel artifacts (camel-tarfile, camel-quarkus-tarfile) are unrelated implementations in other languages and do not include the vulnerable CPython tarfile.extractall() filter logic. The separately packaged PyPI component backports-tarfile is also out of scope for this CVE as assigned: it is not the CPython stdlib module named in the advisory and this CVE tracks the interpreter-provided tarfile shipped in Red Hat python3* packages.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11940"
},
{
"category": "external",
"summary": "RHBZ#2491848",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491848"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11940"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/151558",
"url": "https://github.com/python/cpython/issues/151558"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/151559",
"url": "https://github.com/python/cpython/pull/151559"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"
}
],
"release_date": "2026-06-23T16:04:17.321000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory"
},
{
"acknowledgments": [
{
"names": [
"Gitee Codepecker Lab"
]
}
],
"cve": "CVE-2026-15588",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499675"
}
],
"notes": [
{
"category": "description",
"text": "A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the `GDBus` component of GLib. A local or remote unauthenticated attacker could send an engineered stream of data without line length limitations during the authentication process (`gdbusauth`), leading to excessive memory allocation and CPU consumption. This resource exhaustion can result in a denial-of-service (DoS) condition, causing applications or services dependent on GLib to become unstable or crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15588"
},
{
"category": "external",
"summary": "RHBZ#2499675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15588",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15588"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15588",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15588"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3985",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3985"
}
],
"release_date": "2026-07-12T10:10:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering"
},
{
"acknowledgments": [
{
"names": [
"asotyc"
]
}
],
"cve": "CVE-2026-16118",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-07-17T13:20:23.862000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2501732"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker must convince a user to install a malicious MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) and process it with an application performing MIME type detection, limiting its exposure. Also, only little-endian systems are vulnerable. Due to these reasons, this issue has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16118"
},
{
"category": "external",
"summary": "RHBZ#2501732",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501732"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16118",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16118"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16118",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16118"
},
{
"category": "external",
"summary": "https://gitlab.freedesktop.org/xdg/xdgmime/-/work_items/41",
"url": "https://gitlab.freedesktop.org/xdg/xdgmime/-/work_items/41"
}
],
"release_date": "2026-07-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Do not install a MIME magic file or content from untrusted sources.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c"
},
{
"cve": "CVE-2026-44431",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-05-13T17:01:41.663622+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477167"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44431"
},
{
"category": "external",
"summary": "RHBZ#2477167",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477167"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44431",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc"
}
],
"release_date": "2026-05-13T15:20:24.588000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-47162",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-06-11T19:00:56.050612+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487964"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of unauthorized commands. This could lead to arbitrary code execution on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary Code Execution via crafted directory names",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47162"
},
{
"category": "external",
"summary": "RHBZ#2487964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487964"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47162",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47162"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47162",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47162"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b",
"url": "https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0495",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0495"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c",
"url": "https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c"
}
],
"release_date": "2026-06-11T18:32:14.471000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary Code Execution via crafted directory names"
},
{
"cve": "CVE-2026-47167",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-06-11T19:02:45.999423+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487996"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition patterns. If a user opens this repository and triggers a specific function, the crafted patterns are unsafely processed, potentially allowing the attacker to execute unauthorized commands on the user\u0027s system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via crafted step-definition patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Vim\u0027s cucumber filetype plugin, when configured with Ruby support, allows for arbitrary code execution. An attacker could exploit this by convincing a user to open a specially crafted repository and trigger a specific step-jump mapping, leading to local command execution. This risk is contingent on user interaction with untrusted content and the presence of the Ruby-enabled cucumber plugin.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47167"
},
{
"category": "external",
"summary": "RHBZ#2487996",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487996"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47167",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47167"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47167",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47167"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934",
"url": "https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0496",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0496"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9",
"url": "https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9"
}
],
"release_date": "2026-06-11T18:31:44.286000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should exercise caution when opening untrusted files or repositories with Vim, particularly those that might trigger the `cucumber` filetype plugin. Avoiding interaction with untrusted content can prevent the execution of malicious step-definition patterns.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary code execution via crafted step-definition patterns"
},
{
"cve": "CVE-2026-52858",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-06-11T19:01:57.042099+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487981"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a sibling Python package. This could lead to a complete compromise of the user\u0027s system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via Python omni-completion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Vim that allows a local attacker to achieve arbitrary code execution. The flaw occurs when a user opens a specially crafted Python file and invokes omni-completion, leading to the execution of malicious code from a co-located Python package. This risk is present in Red Hat Enterprise Linux and other products where Vim is deployed with Python omni-completion enabled, potentially compromising the editing user\u0027s system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-52858"
},
{
"category": "external",
"summary": "RHBZ#2487981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487981"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-52858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-52858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52858"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d",
"url": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0561",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0561"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c",
"url": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c"
}
],
"release_date": "2026-06-11T18:32:32.722000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Users can mitigate this vulnerability by disabling Python omni-completion in Vim if it is not essential for their workflow. This prevents the execution of untrusted Python code when opening hostile files. To disable this feature, ensure that the `omnifunc` option in your Vim configuration (e.g., `~/.vimrc`) is not set to `pythoncomplete#Complete` or `python3complete#Complete`. Alternatively, users should avoid invoking omni-completion (`Ctrl-X Ctrl-O`) on Python files from untrusted sources. Disabling Python omni-completion may affect Python development functionality within Vim.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary code execution via Python omni-completion"
},
{
"acknowledgments": [
{
"names": [
"Andrew Tridgell \u003ctridge60@gmail.com\u003e",
"Alexander Peslyak \u003csolar@openwall.com\u003e"
]
}
],
"cve": "CVE-2026-54369",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-16T23:47:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490277"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acl: Symlink traversal privilege escalation via libacl functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this flaw as Important because a local attacker who controls any component of a pathname processed by a privileged process using libacl can redirect ACL operations to arbitrary files. Exploitation requires local access with the ability to create symlinks in a directory that a privileged program later processes with acl_get_file() or acl_set_file(). In default RHEL and OpenShift CoreOS configurations, standard file permission settings limit where unprivileged users can create symlinks, reducing the practical attack surface. Programs that operate on user-supplied paths with elevated privileges are most at risk.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54369"
},
{
"category": "external",
"summary": "RHBZ#2490277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54369",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54369"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369"
}
],
"release_date": "2026-06-29T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Restrict unprivileged users from creating symlinks in directories that privileged processes operate on with ACL commands. Where possible, use the fs.protected_symlinks sysctl (enabled by default on RHEL 7+), which prevents symlink following in world-writable sticky directories unless the owner of the symlink matches the owner of the target file or directory.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "acl: Symlink traversal privilege escalation via libacl functions"
},
{
"cve": "CVE-2026-54411",
"cwe": {
"id": "CWE-208",
"name": "Observable Timing Discrepancy"
},
"discovery_date": "2026-06-14T18:00:55.002567+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488766"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Linux-PAM\u0027s `pam_userdb` module. This vulnerability, categorized as an Observable Timing Discrepancy (CWE-208), allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during plaintext password comparison, an attacker can deduce the password. This flaw is exploitable when the `pam_userdb` module is configured to store and compare credentials in plaintext, which is not a default setting.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in Linux-PAM\u0027s `pam_userdb` module allows a local or network-adjacent attacker to recover plaintext passwords through a timing discrepancy. This vulnerability requires the `pam_userdb` module to be explicitly configured to store and compare credentials in plaintext, which is not a default or recommended configuration in Red Hat Enterprise Linux environments. The impact is limited by the need for repeated authentication attempts and specific, non-default module configurations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54411"
},
{
"category": "external",
"summary": "RHBZ#2488766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488766"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54411",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54411"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54411",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54411"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/208.html",
"url": "https://cwe.mitre.org/data/definitions/208.html"
},
{
"category": "external",
"summary": "https://github.com/linux-pam/linux-pam",
"url": "https://github.com/linux-pam/linux-pam"
},
{
"category": "external",
"summary": "https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h",
"url": "https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h"
},
{
"category": "external",
"summary": "https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327",
"url": "https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327"
}
],
"release_date": "2026-06-14T17:21:43.853000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this issue, administrators should ensure that the `pam_userdb` module is not configured to store or compare credentials in plaintext. Verify that `pam_userdb` is either configured with a strong cryptographic hashing method or, if not required, is disabled. Avoid using `crypt=none` or omitting the `crypt=` argument when configuring `pam_userdb`. If changes are made to PAM configuration files, services relying on PAM may need to be restarted for the changes to take effect.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module"
},
{
"cve": "CVE-2026-55693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-06-25T16:02:21.870241+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by tricking a user into loading a specially crafted spell file. When the user invokes spell suggestion, the editor attempts to process the malicious file, leading to an out-of-bounds write that corrupts memory and causes the application to crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Out-of-bounds Write in Spell File Word Count",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact vulnerability in Vim\u0027s spell suggestion feature allows an attacker to cause a denial of service. By tricking a user into loading a specially crafted spell file and invoking spell suggestion, an out-of-bounds write can occur, leading to a crash of the editor. This requires user interaction and a malicious file, limiting its immediate exploitability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55693"
},
{
"category": "external",
"summary": "RHBZ#2492980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55693",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55693"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/a80874d9b84a01040e3d1aef2d4a59e1934dafb7",
"url": "https://github.com/vim/vim/commit/a80874d9b84a01040e3d1aef2d4a59e1934dafb7"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0653",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0653"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq",
"url": "https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq"
}
],
"release_date": "2026-06-25T15:34:33.424000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Out-of-bounds Write in Spell File Word Count"
},
{
"cve": "CVE-2026-57455",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-06-25T16:01:18.343208+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492968"
}
],
"notes": [
{
"category": "description",
"text": "A memory corruption flaw in Vim allows an attacker to cause a Denial of Service (DoS). When a SOFO-based spell language is active, providing an excessively long word to the spell checker triggers a stack out-of-bounds write in the spell_soundfold_sofo() function, causing the editor to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in Vim, a command-line text editor, is due to a stack out-of-bounds write in the spell checker. Exploitation requires a user to open a specially crafted file or encounter a long word via spell suggestion while a SOFO-based spell language is active, leading to a Denial of Service. This is not a default configuration in most Red Hat environments, limiting the attack surface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-57455"
},
{
"category": "external",
"summary": "RHBZ#2492968",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492968"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-57455",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57455"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57455",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57455"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/497f931f85339d175d7f69588dd249e8ccfed41b",
"url": "https://github.com/vim/vim/commit/497f931f85339d175d7f69588dd249e8ccfed41b"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0698",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0698"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4",
"url": "https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4"
}
],
"release_date": "2026-06-25T15:22:37.949000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this issue disable spell checking or avoid using SOFO-based spell files. This can be achieved globally by adding set nospell to your ~/.vimrc configuration file. Ensure your systems utilize standard UTF-8 encoding. This flaw is strictly confined to legacy 8-bit encodings and cannot be triggered under default Red Hat configurations.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()"
},
{
"cve": "CVE-2026-57456",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-06-25T16:01:37.648886+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492972"
}
],
"notes": [
{
"category": "description",
"text": "There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. A vulnerability in Vim\u0027s Python omni-completion feature allows for arbitrary code execution. By opening a specially crafted file, a local attacker could execute arbitrary Python code due to improper handling of docstrings during omni-completion, leading to a compromise of the system where Vim is running.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-57456"
},
{
"category": "external",
"summary": "RHBZ#2492972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-57456",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57456"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57456",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57456"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8",
"url": "https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0699",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0699"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3",
"url": "https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3"
}
],
"release_date": "2026-06-25T15:16:16.015000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, users should avoid opening untrusted Python files or using Python omni-completion on such files. If Python omni-completion is not required, it can be disabled by adding `autocmd FileType python setlocal omnifunc=` to your `.vimrc` file. This will prevent the vulnerable code from being executed. Disabling Python omni-completion will remove the ability to use `Ctrl-X Ctrl-O` for Python code completion. A restart of Vim is required for the changes to take effect.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion"
},
{
"acknowledgments": [
{
"names": [
"linhlhq"
]
}
],
"cve": "CVE-2026-58010",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"discovery_date": "2026-06-24T16:21:49.589000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492243"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses \u003e instead of \u003e=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications calling the `g_variant_is_normal_form()`,\u00a0`g_variant_get_normal_form()` or\u00a0`g_variant_byteswap()` functions that process untrusted GVariant data received from D-Bus, network or file are vulnerable to this issue. This flaw can cause an out-of-bounds read of only 1 byte, leading to an information disclosure of only 1 byte and a denial of service when the out-of-bounds read crosses a page boundary. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58010"
},
{
"category": "external",
"summary": "RHBZ#2492243",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492243"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58010"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3915",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3915"
}
],
"release_date": "2026-03-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()"
},
{
"acknowledgments": [
{
"names": [
"linhlhq"
]
}
],
"cve": "CVE-2026-58011",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-06-24T16:30:03.305000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492245"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications that allow a user to submit a date to `g_date_time_add_full()` and later call any getter functions, such as `g_date_time_get_month()` or `g_date_time_get_year()`, with the returned GDateTime object are vulnerable to this issue. This flaw can cause an out-of-bounds read of only 2 bytes, leading to a denial of service due to logic errors that a corrupted date can trigger. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58011"
},
{
"category": "external",
"summary": "RHBZ#2492245",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492245"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58011"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58011",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58011"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3917",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3917"
}
],
"release_date": "2026-03-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, in applications processing user-supplied dates, implement input validation to ensure the supplied date is within the supported range before calling g_date_time_add_full() with untrusted data, specifically rejecting inputs that result in a negative or zero days field.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime"
},
{
"acknowledgments": [
{
"names": [
"linhlhq"
]
}
],
"cve": "CVE-2026-58012",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"discovery_date": "2026-06-24T16:40:58.048000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492247"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications that use g_regex_replace() or g_regex_replace_eval() with the G_REGEX_RAW compile flag and allow user-controlled replacement strings containing case-change escapes (\\u,\u00a0\\l,\u00a0\\U,\u00a0\\L) are vulnerable to this issue. This flaw can cause a buffer over-read of 1-5 bytes, leading to a minor information disclosure and a denial of service when the buffer over-read crosses a page boundary. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58012"
},
{
"category": "external",
"summary": "RHBZ#2492247",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492247"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58012"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3918",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3918"
}
],
"release_date": "2026-03-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement strict input validation to sanitize user-supplied replacement strings, specifically rejecting or escaping case-change modifiers (\\u, \\l, \\U, \\L) before calling g_regex_replace() or g_regex_replace_eval() when the G_REGEX_RAW compile flag is used. Removing the G_REGEX_RAW flag or hardcoding the replacement strings will completely neutralize this issue.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()"
},
{
"acknowledgments": [
{
"names": [
"linhlhq"
]
}
],
"cve": "CVE-2026-58013",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"discovery_date": "2026-06-24T16:49:18.947000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492248"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: buffer over-read in glib/giochannel.c via \"g_io_channel_read_line_backend\"",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications calling g_io_channel_set_line_term() with a multi-byte line terminator (length greater than one) and subsequently calling g_io_channel_read_line_backend() are vulnerable to this issue. This flaw can cause a buffer over-read of 8 bytes, leading to an information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58013"
},
{
"category": "external",
"summary": "RHBZ#2492248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492248"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58013"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58013",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58013"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3925",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3925"
}
],
"release_date": "2026-04-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict any custom line terminator string passed to g_io_channel_set_line_term() to a maximum length of one byte before calling g_io_channel_read_line_backend(). Using the default line terminators will completely neutralize this issue.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: buffer over-read in glib/giochannel.c via \"g_io_channel_read_line_backend\""
},
{
"acknowledgments": [
{
"names": [
"linhlhq"
]
}
],
"cve": "CVE-2026-58014",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2026-06-24T17:16:25.796000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492255"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: off-by-one error in glib/gkeyfile.c via \"g_key_file_get_locale_string_list\"",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications loading or parsing untrusted key files, typically .desktop or .ini files, are vulnerable to this issue. This flaw can cause an off-by-one error, leading to an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58014"
},
{
"category": "external",
"summary": "RHBZ#2492255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58014"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58014",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58014"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3930",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3930"
}
],
"release_date": "2026-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement input validation to sanitize untrusted key files (such as .desktop or .ini files), specifically rejecting or stripping empty values before calling g_key_file_get_locale_string_list(). Alternatively, restricting the application to only load key files from trusted sources will completely neutralize this issue.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: off-by-one error in glib/gkeyfile.c via \"g_key_file_get_locale_string_list\""
},
{
"acknowledgments": [
{
"names": [
"Thepwnisher"
]
}
],
"cve": "CVE-2026-58015",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-24T17:22:00.405000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be in a position to perform a man-in-the-middle (MitM) attack on the connection or operate a malicious server that the client connects to. Furthermore, extracting data requires an oracle attack (guessing and hashing), increasing the complexity of exploitation. However, if successful, this issue allows the exfiltration of sensitive secrets, such as SSH keys or API tokens, from the filesystem. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58015"
},
{
"category": "external",
"summary": "RHBZ#2492256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58015"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58015",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58015"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3931",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3931"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, ensure that applications only connect to trusted D-Bus servers and operate within secure, isolated networks to prevent man-in-the-middle (MitM) attacks. If feasible, configuring the D-Bus connection to strictly require the EXTERNAL authentication mechanism and disabling DBUS_COOKIE_SHA1 will completely neutralize this issue.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive"
},
{
"cve": "CVE-2026-59856",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-07-09T23:01:40.406872+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source command-line text editor. The PHP omni-completion script improperly handles specially crafted input. When a victim opens a malicious PHP file and invokes omni-completion, an unescaped class or trait name can be interpreted as Ex commands. This allows a remote attacker to achieve arbitrary operating-system command execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has rated this vulnerability as having a Moderate impact. While successful exploitation allows for arbitrary operating-system command execution when a user opens a crafted PHP file and triggers omni-completion, this feature is disabled by default in Red Hat products. The requirement for a non-default configuration, combined with mandatory user interaction, significantly reduces the real-world risk.\"",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59856"
},
{
"category": "external",
"summary": "RHBZ#2498867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59856",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59856"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/43afc581a37a35762dd0ef292f038b9dc5680a24",
"url": "https://github.com/vim/vim/commit/43afc581a37a35762dd0ef292f038b9dc5680a24"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-fh26-8f79-wj97",
"url": "https://github.com/vim/vim/security/advisories/GHSA-fh26-8f79-wj97"
}
],
"release_date": "2026-07-09T22:39:01.803000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Users should exercise caution when opening untrusted PHP files and avoid invoking omni-completion on them. To prevent exploitation, the PHP omni-completion script can be disabled by moving or renaming `phpcomplete.vim`. For example, execute `mv /usr/share/vim/vim*/autoload/phpcomplete.vim /usr/share/vim/vim*/autoload/phpcomplete.vim.bak`. This action will disable PHP omni-completion functionality. A restart of Vim is necessary for this change to take effect.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion"
},
{
"cve": "CVE-2026-59858",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-07-09T23:01:43.278752+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498868"
}
],
"notes": [
{
"category": "description",
"text": "A command injection vulnerability in Vim\u0027s C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in Vim\u0027s C omni-completion script allows for arbitrary command execution. Exploitation requires a user to open a specially crafted C source file along with a malicious project tags file and then invoke C omni-completion. This limits the attack vector as it relies on specific user interaction and the presence of a hostile tags file, making it less likely to be exploited without user awareness.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59858"
},
{
"category": "external",
"summary": "RHBZ#2498868",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498868"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59858"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e",
"url": "https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x",
"url": "https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x"
}
],
"release_date": "2026-07-09T22:37:52.789000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Users are advised to avoid opening untrusted C source files or project tags files in Vim. Exercising caution and only processing trusted content prevents exploitation.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion"
},
{
"cve": "CVE-2026-60002",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-07-08T01:01:33.808610+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497936"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH. A remote attacker could exploit a use-after-free vulnerability on the client side when a server changes its host key during a key re-exchange. This could lead to high impact on confidentiality and integrity, and low impact on availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in OpenSSH client could allow a malicious SSH server to execute arbitrary code on the connecting client due to a use-after-free vulnerability during host key re-exchange. While requiring a connection to a specially crafted server, the potential for high impact on client confidentiality and integrity elevates the severity beyond Moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-60002"
},
{
"category": "external",
"summary": "RHBZ#2497936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497936"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-60002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60002"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-60002",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-60002"
},
{
"category": "external",
"summary": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2",
"url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.4p1",
"url": "https://www.openssh.org/releasenotes.html#10.4p1"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/07/06/5",
"url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
}
],
"release_date": "2026-07-08T00:17:33.058000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this issue, OpenSSH clients should only connect to trusted SSH servers. Enforcing strict host key checking and carefully managing `known_hosts` files can help prevent connections to servers with unexpected or altered host keys, thereby reducing exposure to this client-side vulnerability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side"
},
{
"cve": "CVE-2026-64830",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-07-22T18:01:30.962327+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506193"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FFmpeg, a widely used multimedia framework. This vulnerability, a heap buffer overflow in the VobSub subtitle demuxer, allows a remote attacker to corrupt memory. By providing a specially crafted subtitle file, an attacker can trigger unbounded writes, which could lead to arbitrary code execution in applications that use FFmpeg\u0027s VobSub demuxer. This could allow an attacker to take control of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A heap buffer overflow in FFmpeg\u0027s VobSub subtitle demuxer can lead to arbitrary code execution when processing a specially crafted subtitle file. Exploitation requires user interaction, such as opening a malicious media file, which reduces the attack surface but can result in high impact if an affected application processes untrusted content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-64830"
},
{
"category": "external",
"summary": "RHBZ#2506193",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506193"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-64830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64830"
},
{
"category": "external",
"summary": "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951",
"url": "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951"
},
{
"category": "external",
"summary": "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657",
"url": "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer",
"url": "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"
}
],
"release_date": "2026-07-22T16:33:05.724000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing VobSub subtitle files from untrusted or unknown sources. For applications that utilize FFmpeg\u0027s VobSub demuxer, consider running them within a sandboxed environment to restrict the potential impact of a successful exploit.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer."
},
{
"cve": "CVE-2026-64834",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-22T18:01:16.743762+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506191"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FFmpeg. A remote attacker can exploit an infinite loop vulnerability in the RTP/ASF demuxer by sending a specially crafted stream. This vulnerability occurs because the rtp_asf_fix_header function does not properly validate the size of data chunks, preventing the processing loop from advancing. Successful exploitation leads to CPU exhaustion, causing a Denial of Service (DoS) for legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FFmpeg: Denial of Service via crafted RTP/ASF stream",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The impact rating reflects that this issue strictly impacts Availability (A:H) with low/no effect on Confidentiality or Integrity. Exploitation requires an active application to ingest and demux a maliciously crafted RTP/ASF media stream; passive files at rest pose no risk. \n\nSuccessful exploitation results in high CPU consumption that stalls the stream-processing thread or container worker, but it does not cause memory corruption or allow arbitrary code execution. Systems that do not dynamically ingest untrusted, real-time RTP/ASF network streams are effectively out of scope for operational disruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-64834"
},
{
"category": "external",
"summary": "RHBZ#2506191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506191"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-64834",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64834"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64834",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64834"
},
{
"category": "external",
"summary": "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632",
"url": "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632"
},
{
"category": "external",
"summary": "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663",
"url": "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer",
"url": "https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"
}
],
"release_date": "2026-07-22T17:06:07.659000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to applications utilizing FFmpeg for RTP/ASF stream demuxing, ensuring only trusted sources can provide such streams. Implement firewall rules to limit inbound connections to the affected services. This may impact legitimate functionality if trusted sources are inadvertently blocked.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "FFmpeg: Denial of Service via crafted RTP/ASF stream"
},
{
"cve": "CVE-2026-66036",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-07-24T20:02:21.975439+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506909"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FFmpeg. A remote attacker can exploit a heap out-of-bounds write vulnerability within the `vf_hqdn3d` filter by providing a specially crafted video file. When filtergraph reinitialization is disabled, the filter allocates undersized memory buffers for video frames. Subsequent larger frames can cause the application to write beyond these allocated boundaries, leading to heap memory corruption. This can result in arbitrary code execution or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66036"
},
{
"category": "external",
"summary": "RHBZ#2506909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66036"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66036",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66036"
},
{
"category": "external",
"summary": "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c",
"url": "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c"
},
{
"category": "external",
"summary": "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783",
"url": "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter",
"url": "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"
}
],
"release_date": "2026-07-24T19:34:16.223000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter"
},
{
"cve": "CVE-2026-66039",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-07-24T21:01:12.223005+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF (Core Audio Format) file. This malicious file manipulates the bytes_per_packet value, leading to an undersized memory allocation and a heap out-of-bounds write. This vulnerability could allow an attacker to execute arbitrary code on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66039"
},
{
"category": "external",
"summary": "RHBZ#2506937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66039"
},
{
"category": "external",
"summary": "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718",
"url": "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718"
},
{
"category": "external",
"summary": "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631",
"url": "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file",
"url": "https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"
}
],
"release_date": "2026-07-24T19:42:42.453000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file"
},
{
"cve": "CVE-2026-69147",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-16T18:01:14.936333+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2535581"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models. An attacker can exploit this by submitting specially crafted video requests that force the use of the PyNvVideoCodec GPU decoder. This bypasses the engine\u0027s static GPU memory reservation, allowing the attacker to exhaust shared GPU memory. The consequence is a denial of service (DoS), leading to request failures or worker crashes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: GPU memory exhaustion via PyNvVideoCodec decode bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69147"
},
{
"category": "external",
"summary": "RHBZ#2535581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535581"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69147",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69147"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69147",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69147"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/283893c72292ede38d277e3cd2b9b64c3e4f1dda",
"url": "https://github.com/vllm-project/vllm/commit/283893c72292ede38d277e3cd2b9b64c3e4f1dda"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/ba22152096b2484faa3579624a253d54804d876d",
"url": "https://github.com/vllm-project/vllm/commit/ba22152096b2484faa3579624a253d54804d876d"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/47259",
"url": "https://github.com/vllm-project/vllm/pull/47259"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8pw2-6jv3-mj5j",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8pw2-6jv3-mj5j"
}
],
"release_date": "2026-09-16T17:49:20.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vllm: vLLM: GPU memory exhaustion via PyNvVideoCodec decode bypass"
},
{
"cve": "CVE-2026-71486",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-17T20:21:07.893565+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517595"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM. An authenticated API client can exploit derender endpoints by providing oversized GenerateResponse objects. These endpoints process the objects without enforcing output bounds or response-size limits. This can lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via unbounded token ID decoding",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-71486"
},
{
"category": "external",
"summary": "RHBZ#2517595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-71486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71486"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/8e61b646e2d157f9b93451fa048f9c8530c8a67b",
"url": "https://github.com/vllm-project/vllm/commit/8e61b646e2d157f9b93451fa048f9c8530c8a67b"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/47260",
"url": "https://github.com/vllm-project/vllm/pull/47260"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0",
"url": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8737-qx52-hjff",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8737-qx52-hjff"
}
],
"release_date": "2026-08-17T20:13:06.289000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vllm: vLLM: Denial of Service via unbounded token ID decoding"
},
{
"cve": "CVE-2026-73066",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-11T15:01:14.226581+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514011"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Tesseract, an open-source Optical Character Recognition (OCR) engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract\u0027s deserializer processes this component during OCR recognition, an unchecked integer multiplication can occur, leading to an undersized buffer and a heap out-of-bounds write. This vulnerability could result in a denial of service or potentially arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73066"
},
{
"category": "external",
"summary": "RHBZ#2514011",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514011"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73066",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73066"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73066",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73066"
},
{
"category": "external",
"summary": "https://github.com/tesseract-ocr/tesseract/commit/2f4d2f4bf45c363785d7bf1da29b6628f8939a72",
"url": "https://github.com/tesseract-ocr/tesseract/commit/2f4d2f4bf45c363785d7bf1da29b6628f8939a72"
},
{
"category": "external",
"summary": "https://github.com/tesseract-ocr/tesseract/pull/4588",
"url": "https://github.com/tesseract-ocr/tesseract/pull/4588"
},
{
"category": "external",
"summary": "https://github.com/tesseract-ocr/tesseract/releases/tag/5.5.3",
"url": "https://github.com/tesseract-ocr/tesseract/releases/tag/5.5.3"
},
{
"category": "external",
"summary": "https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-7j76-5rq5-5jg8",
"url": "https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-7j76-5rq5-5jg8"
}
],
"release_date": "2026-08-11T14:49:16.817000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing `.traineddata` files from untrusted sources with Tesseract. Ensure that only `.traineddata` files from known, reputable origins are used for OCR recognition.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata"
},
{
"cve": "CVE-2026-73072",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-11T15:41:15.596551+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514037"
}
],
"notes": [
{
"category": "description",
"text": "A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the set_sofo() function fails to reset internal data between sections, leading to an out-of-bounds write.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Heap buffer overflow allows arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A local attacker can exploit an Important heap buffer overflow in Vim to execute arbitrary code by tricking a user into loading a malicious spell file.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73072"
},
{
"category": "external",
"summary": "RHBZ#2514037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514037"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73072"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73072",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73072"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a",
"url": "https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0846",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0846"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64",
"url": "https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64"
}
],
"release_date": "2026-08-11T15:31:35.331000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "If spell checking is unused, disable it with set nospell in ~/.vimrc and do not set spelllang. If spell is required, load only trusted .spl files from Vim\u2019s spell directories and do not place untrusted spell files on runtimepath. Additionally, consider disabling modelines (set nomodeline in ~/.vimrc) to prevent untrusted text files from automatically overriding these settings when opened.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Heap buffer overflow allows arbitrary code execution"
},
{
"cve": "CVE-2026-73076",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-08-11T15:41:02.894650+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514034"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimball#RmVimball() function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary command execution via crafted vimball",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Vim where a crafted vimball can lead to arbitrary command execution. The flaw allows an attacker to embed malicious commands within a `.VimballRecord` file, which are then executed with user privileges during a later, unrelated vimball installation or removal. This extends the impact of processing untrusted vimball files beyond the initial installation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73076"
},
{
"category": "external",
"summary": "RHBZ#2514034",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514034"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73076"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452",
"url": "https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2",
"url": "https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2"
}
],
"release_date": "2026-08-11T15:37:59.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Avoid installing or removing vimballs from untrusted sources. This vulnerability relies on a user processing a malicious vimball, which then injects commands that are executed during a subsequent vimball operation. Exercise caution when handling vimball files from unknown or unverified origins.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary command execution via crafted vimball"
},
{
"cve": "CVE-2026-73077",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-08-11T16:11:25.535913+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514065"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability in Vim\u0027s shell script plugins (sh.vim, zsh.vim, ps1.vim) allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Vim\u0027s shell plugins allows full system compromise in Red Hat environments if a user selects crafted text in Visual mode and triggers a keyword lookup. This does not affect RHEL 8 and older versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73077"
},
{
"category": "external",
"summary": "RHBZ#2514065",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514065"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73077",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73077"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73077",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73077"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e",
"url": "https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2",
"url": "https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2"
}
],
"release_date": "2026-08-11T15:39:24.579000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, users can disable the `keywordprg` option for shell script filetypes. This prevents Vim from executing external commands via the `K` command with potentially untrusted input. Create or edit the following files in your Vim configuration directory:\n\n- `~/.vim/after/ftplugin/sh.vim`: `setlocal keywordprg=`\n- `~/.vim/after/ftplugin/zsh.vim`: `setlocal keywordprg=`\n- `~/.vim/after/ftplugin/ps1.vim`: `setlocal keywordprg=`\n\nThis change takes effect the next time a shell script is opened in Vim.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling"
},
{
"cve": "CVE-2026-73078",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2026-08-11T16:10:59.827742+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514058"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in Vim\u0027s netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Vim\u0027s `netrw` plugin allows for arbitrary command execution in GUI Vim. By crafting a malicious directory path, an attacker could exploit improper neutralization of special characters when the path is browsed or bookmarked, leading to command injection. This issue specifically impacts GUI installations and requires user interaction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73078"
},
{
"category": "external",
"summary": "RHBZ#2514058",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514058"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73078",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73078"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73078",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73078"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69",
"url": "https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2",
"url": "https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2"
}
],
"release_date": "2026-08-11T15:41:08.048000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid browsing or bookmarking untrusted or maliciously crafted directory paths within GUI Vim. Users should exercise caution when interacting with `netrw` menu entries derived from external or untrusted sources.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries"
},
{
"cve": "CVE-2026-73555",
"cwe": {
"id": "CWE-209",
"name": "Generation of Error Message Containing Sensitive Information"
},
"discovery_date": "2026-08-13T15:14:06.679395+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515418"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models. Unauthenticated attackers can send malformed JSON requests to various API endpoints, triggering validation errors. The system\u0027s error handling mechanism converts these validation errors into strings without properly sanitizing traceback-style file paths. This vulnerability allows for the disclosure of sensitive internal system information, including the operating system username, home and virtual environment paths, Python version, internal package structure, and handler function names.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Information Disclosure via Validation Error Messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: vLLM, as deployed in Red Hat AI Inference Server and Red Hat OpenShift AI, is susceptible to information disclosure. Unauthenticated, malformed JSON requests to its API endpoints can expose sensitive system details, including OS usernames, file paths, Python version, and internal package structure, due to insufficient sanitization of validation error messages.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73555"
},
{
"category": "external",
"summary": "RHBZ#2515418",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515418"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73555",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73555"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73555",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73555"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/e87521626febe2763f997691d1599de4175f4324",
"url": "https://github.com/vllm-project/vllm/commit/e87521626febe2763f997691d1599de4175f4324"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/46415",
"url": "https://github.com/vllm-project/vllm/pull/46415"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0",
"url": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-hwrm-c4cx-rf4j",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-hwrm-c4cx-rf4j"
}
],
"release_date": "2026-08-13T14:50:03.539000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vllm: vLLM: Information Disclosure via Validation Error Messages"
},
{
"cve": "CVE-2026-73556",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-08-13T15:13:23.640309+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515404"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models. An unauthenticated remote attacker can exploit a Regular Expression Denial of Service (ReDoS) vulnerability in the lm-format-enforcer backend. By submitting a specially crafted regular expression through the structured_outputs.regex parameter, the attacker can cause the system to consume excessive CPU resources. This leads to a denial of service, stalling the structured-output engine and preventing legitimate requests from being processed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via Regular Expression processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in vLLM is rated as Important because an unauthenticated remote attacker can trigger a Regular Expression Denial of Service (ReDoS). By sending a specially crafted regular expression to the `/v1/completions` endpoint, the attacker can cause the vLLM service to consume excessive CPU resources, leading to a complete stall of the structured-output engine and preventing legitimate requests.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73556"
},
{
"category": "external",
"summary": "RHBZ#2515404",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515404"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73556",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73556"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73556",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73556"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/c9a788eedc412acceaa5112e0d44624b49841577",
"url": "https://github.com/vllm-project/vllm/commit/c9a788eedc412acceaa5112e0d44624b49841577"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/47595",
"url": "https://github.com/vllm-project/vllm/pull/47595"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0",
"url": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-48jh-3gj7-fg8v",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-48jh-3gj7-fg8v"
}
],
"release_date": "2026-08-13T14:56:52.569000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Denial of Service via Regular Expression processing"
},
{
"cve": "CVE-2026-73557",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-08-13T15:13:09.787732+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models. An incomplete remediation for a previous vulnerability (CVE-2025-62164) can be bypassed. This occurs when concurrent prompt parts are processed, leading to a race condition in the handling of sparse tensors. This vulnerability could allow an attacker to cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Incomplete remediation allows bypass via concurrent prompt processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in vLLM, an inference and serving engine for large language models, arises from an incomplete remediation for a race condition. When `enable_prompt_embeds` is active, concurrent prompt processing can lead to an invalid sparse tensor being processed, potentially causing a denial of service. This issue primarily affects deployments utilizing vLLM with multimodal features enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73557"
},
{
"category": "external",
"summary": "RHBZ#2515401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73557",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73557"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73557",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73557"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/793cf79c89d4049124e756915468ac30318f2e50",
"url": "https://github.com/vllm-project/vllm/commit/793cf79c89d4049124e756915468ac30318f2e50"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/48583",
"url": "https://github.com/vllm-project/vllm/pull/48583"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0",
"url": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-pr7f-p5mw-fc87",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-pr7f-p5mw-fc87"
}
],
"release_date": "2026-08-13T15:00:15.746000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vllm: vLLM: Incomplete remediation allows bypass via concurrent prompt processing"
},
{
"cve": "CVE-2026-73558",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-08-13T15:12:04.985459+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515383"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models. An integer overflow vulnerability in the `act_and_mul_kernel` kernel allows a remote attacker to cause cross-user data leakage. By crafting specific requests processed in the same inference batch, an attacker can obtain a partial or complete copy of another user\u0027s inference result. This could lead to the unauthorized disclosure of sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Cross-User Data Leakage via Integer Overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in vLLM, an inference engine for large language models, can lead to cross-user data leakage. An integer overflow during batched inference may allow one user\u0027s request to inadvertently receive partial or complete inference results from another user within the same batch. This is particularly relevant in multi-tenant environments where vLLM processes requests concurrently from different users.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73558"
},
{
"category": "external",
"summary": "RHBZ#2515383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73558",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73558"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73558",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73558"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/451227cb3ff07989698fed982c2d3e4300257924",
"url": "https://github.com/vllm-project/vllm/commit/451227cb3ff07989698fed982c2d3e4300257924"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/issues/42860",
"url": "https://github.com/vllm-project/vllm/issues/42860"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/49660",
"url": "https://github.com/vllm-project/vllm/pull/49660"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/releases/tag/v0.27.0",
"url": "https://github.com/vllm-project/vllm/releases/tag/v0.27.0"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5"
}
],
"release_date": "2026-08-13T15:06:06.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vllm: vLLM: Cross-User Data Leakage via Integer Overflow"
},
{
"cve": "CVE-2026-73559",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T15:40:59.250906+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515421"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models. An authenticated API client can exploit this vulnerability by sending a single request to the /v1/completions endpoint with an excessively large list of prompts. This unbounded input causes the vLLM server to allocate a disproportionate amount of CPU, memory, and other resources, leading to a Denial of Service (DoS) condition. This can disrupt or starve other services sharing the same vLLM instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via unbounded completion prompt lists",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: An authenticated API client in Red Hat OpenShift AI could exploit a flaw in the vLLM component by submitting an excessively large list of prompts. This could lead to resource exhaustion, causing a denial of service for the inference engine.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73559"
},
{
"category": "external",
"summary": "RHBZ#2515421",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515421"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73559",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73559"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73559",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73559"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/675f4295cdfe0d870471c2b51bfeca3a68a9569e",
"url": "https://github.com/vllm-project/vllm/commit/675f4295cdfe0d870471c2b51bfeca3a68a9569e"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/47845",
"url": "https://github.com/vllm-project/vllm/pull/47845"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0",
"url": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-87x5-vmc3-756j",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-87x5-vmc3-756j"
}
],
"release_date": "2026-08-13T15:09:02.493000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vllm: vLLM: Denial of Service via unbounded completion prompt lists"
},
{
"cve": "CVE-2026-73560",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-08-17T20:31:11.938609+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517604"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models. The MiMoV2OmniMultiModalProcessor component improperly handles attacker-controlled image and audio strings, bypassing security protections. This vulnerability allows a remote attacker to perform Server-Side Request Forgery (SSRF) and read arbitrary local files accessible to the vLLM process. Successful exploitation could lead to unauthorized access to internal network resources, cloud metadata, and sensitive local system files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Server-Side Request Forgery and arbitrary file read via improper media processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73560"
},
{
"category": "external",
"summary": "RHBZ#2517604",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517604"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73560",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73560"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73560",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73560"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/54503ecec0f3ac31e5ecfc5f28652e4cc42307b5",
"url": "https://github.com/vllm-project/vllm/commit/54503ecec0f3ac31e5ecfc5f28652e4cc42307b5"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/43117",
"url": "https://github.com/vllm-project/vllm/pull/43117"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0",
"url": "https://github.com/vllm-project/vllm/releases/tag/v0.26.0"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-4hhp-h66f-j5j7",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-4hhp-h66f-j5j7"
}
],
"release_date": "2026-08-17T20:17:25.769000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vllm: vLLM: Server-Side Request Forgery and arbitrary file read via improper media processing"
},
{
"cve": "CVE-2026-84379",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-09-02T18:03:15.270618+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527696"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in HTTPX2, a Python HTTP client. A remote attacker could exploit this vulnerability by sending specially crafted multipart/form-data requests. The `FileField.render_headers()` function fails to validate `Content-Type` values and custom headers, allowing the injection of Carriage Return (CR) or Line Feed (LF) characters. This could lead to the injection of arbitrary part headers, potentially altering the interpretation of multipart data or bypassing security checks by a downstream parser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpx2: HTTPX2: Multipart header injection via unvalidated input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate severity flaw in the `httpx2` Python library allows for multipart header injection. An attacker could exploit this by providing specially crafted `content_type` values or custom headers when an application uses `httpx2` to send multipart form data, potentially leading to altered part semantics or bypassing header-based security checks.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84379"
},
{
"category": "external",
"summary": "RHBZ#2527696",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527696"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84379"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84379",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84379"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/commit/de96d810ee4e309d118982fe7084a46a2bcd600d",
"url": "https://github.com/pydantic/httpx2/commit/de96d810ee4e309d118982fe7084a46a2bcd600d"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/pull/1142",
"url": "https://github.com/pydantic/httpx2/pull/1142"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/releases/tag/v2.11.0",
"url": "https://github.com/pydantic/httpx2/releases/tag/v2.11.0"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/security/advisories/GHSA-h4x7-gw46-3wm6",
"url": "https://github.com/pydantic/httpx2/security/advisories/GHSA-h4x7-gw46-3wm6"
}
],
"release_date": "2026-09-02T17:57:17.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpx2: HTTPX2: Multipart header injection via unvalidated input"
},
{
"cve": "CVE-2026-84380",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-09-02T18:02:32.452817+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527695"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in HTTPX2, a Python HTTP client. The `Request._prepare()` function can incorrectly add a `Content-Length` header to a request that already includes a `Transfer-Encoding` header. This conflict in HTTP framing headers can lead to request smuggling or connection desynchronization. This could allow an attacker to bypass security controls or interfere with network traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpx2: HTTPX2: Request Smuggling and Connection Desynchronization via Conflicting HTTP Headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate. The HTTPX2 Python client can be exploited for request smuggling or connection desynchronization due to conflicting HTTP framing headers. Exploitation requires a high attack complexity, as it depends on how downstream intermediaries process these conflicting headers, leading to limited impact on confidentiality, integrity, and availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84380"
},
{
"category": "external",
"summary": "RHBZ#2527695",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527695"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84380"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84380",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84380"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/commit/829b93a2393212996f613e635261f777d9ec6eab",
"url": "https://github.com/pydantic/httpx2/commit/829b93a2393212996f613e635261f777d9ec6eab"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/pull/1137",
"url": "https://github.com/pydantic/httpx2/pull/1137"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/releases/tag/v2.11.0",
"url": "https://github.com/pydantic/httpx2/releases/tag/v2.11.0"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/security/advisories/GHSA-pf96-p4fj-6566",
"url": "https://github.com/pydantic/httpx2/security/advisories/GHSA-pf96-p4fj-6566"
}
],
"release_date": "2026-09-02T17:58:55.520000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpx2: HTTPX2: Request Smuggling and Connection Desynchronization via Conflicting HTTP Headers"
},
{
"cve": "CVE-2026-84382",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-09-02T18:31:36.098738+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527702"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in httpx2, a Python HTTP client. The content decoders in httpx2 fully inflate compressed network chunks (such as gzip, deflate, br, or zstd) before yielding bounded pieces to the application. This can lead to a small compressed chunk expanding significantly in memory, for example, a 64 KiB chunk expanding to approximately 64 MiB. A remote attacker, by controlling or compromising a server, could exploit this vulnerability to cause severe memory pressure or out-of-memory process termination, leading to a Denial of Service (DoS) for applications using httpx2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpx2: HTTPX2: Denial of Service via streaming response decompression memory amplification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84382"
},
{
"category": "external",
"summary": "RHBZ#2527702",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527702"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84382"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84382",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84382"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/commit/4fd0c70a3f207c618b145934792f791bccfb39f8",
"url": "https://github.com/pydantic/httpx2/commit/4fd0c70a3f207c618b145934792f791bccfb39f8"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/pull/1126",
"url": "https://github.com/pydantic/httpx2/pull/1126"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/releases/tag/v2.12.0",
"url": "https://github.com/pydantic/httpx2/releases/tag/v2.12.0"
},
{
"category": "external",
"summary": "https://github.com/pydantic/httpx2/security/advisories/GHSA-8xx6-hgc6-gc2m",
"url": "https://github.com/pydantic/httpx2/security/advisories/GHSA-8xx6-hgc6-gc2m"
}
],
"release_date": "2026-09-02T18:03:05.010000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "httpx2: HTTPX2: Denial of Service via streaming response decompression memory amplification"
},
{
"cve": "CVE-2026-97687",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-09-29T15:44:25.449046+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543255"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy\u0027s TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97687"
},
{
"category": "external",
"summary": "RHBZ#2543255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97687",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97687"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465",
"url": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3",
"url": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/pull/5093",
"url": "https://github.com/urllib3/urllib3/pull/5093"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77"
}
],
"release_date": "2026-09-29T15:30:27.136000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override"
},
{
"cve": "CVE-2026-97688",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-09-29T15:43:46.798686+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543253"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. A malicious server can trigger a Denial of Service (DoS) by returning a specially crafted compressed response containing trailing bytes. When streaming the response in chunks, the decompression logic can enter an infinite loop by repeatedly processing unconsumed data without making progress. This issue leads to excessive CPU utilization and prevents the affected network request from completing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97688"
},
{
"category": "external",
"summary": "RHBZ#2543253",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543253"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97688",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97688"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97688",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97688"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f",
"url": "https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g"
}
],
"release_date": "2026-09-29T15:32:17.622000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding"
},
{
"cve": "CVE-2026-97689",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-29T15:41:38.807723+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543245"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97689"
},
{
"category": "external",
"summary": "RHBZ#2543245",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543245"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97689",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97689"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed",
"url": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw"
}
],
"release_date": "2026-09-29T15:36:05.963000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser"
},
{
"cve": "CVE-2026-101917",
"cwe": {
"id": "CWE-408",
"name": "Incorrect Behavior Order: Early Amplification"
},
"discovery_date": "2026-09-28T20:32:48.879166+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542677"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. A remote attacker can trigger a Denial of Service (DoS) through outbound request amplification by submitting tokens containing unknown key identifiers. Because the library does not cache lookup failures or enforce a minimum refresh interval when fetching signing keys, each invalid key identifier forces a new request to the remote JSON Web Key Set (JWKS) server. This allows an attacker to exhaust network resources and overwhelm the configured authentication endpoints.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT: Denial of Service via outbound request amplification on unknown key identifiers",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-101917"
},
{
"category": "external",
"summary": "RHBZ#2542677",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542677"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-101917",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-101917"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-101917",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101917"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/ba4853a75fb9676362da17f67d0f64bd18afd4e1",
"url": "https://github.com/jpadilla/pyjwt/commit/ba4853a75fb9676362da17f67d0f64bd18afd4e1"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-2gx3-rcp4-g85q",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-2gx3-rcp4-g85q"
}
],
"release_date": "2026-09-28T20:07:44.237000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "pyjwt: PyJWT: Denial of Service via outbound request amplification on unknown key identifiers"
},
{
"cve": "CVE-2026-101918",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-09-28T20:30:53.839180+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542668"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. When processing a JSON Web Token (JWT) prior to signature verification, the parser fails to properly handle deeply nested data, leading to an unhandled recursion error. A remote unauthenticated attacker could exploit this flaw by submitting a specially crafted token, causing the application to raise an unexpected server exception and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT: Denial of Service via deeply nested JSON token payload",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate impact because an unauthenticated remote attacker can cause a denial of service at the request level without resulting in process termination, persistent resource exhaustion, or authentication bypass. In Red Hat environments, applications utilizing PyJWT are primarily exposed when processing untrusted JSON Web Tokens through pre-verification decoding routines or automated key retrieval mechanisms. Standard token validation workflows that enforce signature verification prior to payload parsing remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-101918"
},
{
"category": "external",
"summary": "RHBZ#2542668",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542668"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-101918",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-101918"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-101918",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101918"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b",
"url": "https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.15.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.15.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v"
}
],
"release_date": "2026-09-28T20:11:55.278000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "pyjwt: PyJWT: Denial of Service via deeply nested JSON token payload"
},
{
"cve": "CVE-2026-102265",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-09-28T21:01:12.233805+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542703"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. An unauthenticated remote attacker could trigger a Denial of Service (DoS) condition by supplying a specially crafted JSON Web Token (JWT) with deeply nested headers during decoding. Processing these nested structures causes an uncaught recursion error that bypasses standard error handling, leading to request-level failures and potential application crashes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Denial of Service via deeply nested token headers",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102265"
},
{
"category": "external",
"summary": "RHBZ#2542703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542703"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102265",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102265"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102265",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102265"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/06573692ebcdec8831c3927513b3e87c31fbbb62",
"url": "https://github.com/jpadilla/pyjwt/commit/06573692ebcdec8831c3927513b3e87c31fbbb62"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-8wjv-2p76-3863",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-8wjv-2p76-3863"
}
],
"release_date": "2026-09-28T20:48:04.664000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "pyjwt: pyjwt: Denial of Service via deeply nested token headers"
},
{
"cve": "CVE-2026-102266",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:31:44.389306+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542671"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyjwt. A remote attacker can forge authentication tokens and bypass security controls by signing tokens with an empty key. When verifying tokens against a JSON Web Key (JWK) set that contains an empty Hash-based Message Authentication Code (HMAC) key, the library fails to enforce key-length validation. This allows an attacker to generate valid tokens carrying arbitrary claims to gain unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Authentication bypass via empty HMAC key acceptance",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having an Important impact for Red Hat products because successful exploitation allows an unauthenticated remote attacker to generate forged tokens with arbitrary administrative claims, completely bypassing authentication controls. The flaw is not classified as Critical because exploitation requires a specific misconfiguration prerequisite\u2014the target environment must actively load a symmetric key set containing a blank key entry. Typical deployments running standard authentication configurations are not exposed unless an empty HMAC key definition is explicitly ingested by the application.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102266"
},
{
"category": "external",
"summary": "RHBZ#2542671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102266",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102266"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102266",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102266"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/f91ed44dd65baaf457f4b3353ed35e98a753934c",
"url": "https://github.com/jpadilla/pyjwt/commit/f91ed44dd65baaf457f4b3353ed35e98a753934c"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9j54-fg26-wv3r",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9j54-fg26-wv3r"
}
],
"release_date": "2026-09-28T20:21:26.164000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: pyjwt: Authentication bypass via empty HMAC key acceptance"
},
{
"cve": "CVE-2026-102267",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-09-28T20:42:16.576688+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542690"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. When retrieving cryptographic keys from a JSON Web Key Set (JWKS) endpoint, PyJWKClient fails to validate HTTP redirect destinations against trusted domain boundaries. A remote attacker who can influence the response of a trusted endpoint can redirect key requests to an untrusted server, allowing the client to accept forged verification keys or potentially exposing sensitive credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important impact because improper handling of HTTP redirects during dynamic key retrieval can allow an adversary to supply forged cryptographic keys or intercept sensitive request headers. In Red Hat environments where services utilize PyJWKClient to fetch JSON Web Key Sets over the network, accepting untrusted key material may compromise token validation and authentication boundaries. Exploitation requires the target service to dynamically resolve keys via HTTP and relies on an attacker\u0027s ability to manipulate responses returned by the configured key server.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102267"
},
{
"category": "external",
"summary": "RHBZ#2542690",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542690"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102267",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102267"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102267",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102267"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",
"url": "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj"
}
],
"release_date": "2026-09-28T20:23:33.556000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects"
},
{
"cve": "CVE-2026-102268",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:40:56.952621+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT: Authentication bypass via improper public key validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker could forge valid cryptographic tokens and bypass authentication checks without knowing the private signing key. Exploitation occurs when consuming applications configure token verification to accept both symmetric and asymmetric algorithms simultaneously, allowing an asymmetric public key to be mishandled as a symmetric secret. Deployments that strictly enforce a single algorithm type or validate tokens using JSON Web Key sets do not permit this algorithm confusion and remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102268"
},
{
"category": "external",
"summary": "RHBZ#2542685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102268",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102268"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07",
"url": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9"
}
],
"release_date": "2026-09-28T20:26:13.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "pyjwt: PyJWT: Authentication bypass via improper public key validation"
},
{
"cve": "CVE-2026-102269",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-09-28T20:42:36.799845+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. When decoding JSON Web Token (JWT) signature segments, the library accepts characters outside the standard Base64URL encoding format. A remote attacker can exploit this issue by appending extra characters to a valid token signature, creating an alternate token representation that decodes to the identical signature. Consequently, this can allow an attacker to bypass raw-token revocation checks or blocklists that rely on exact string matching.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT: Token revocation bypass via non-canonical signature decoding",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102269"
},
{
"category": "external",
"summary": "RHBZ#2542689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102269",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102269"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102269",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102269"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/e6f48401001609a8f99e71fcaf355fb895d508a8",
"url": "https://github.com/jpadilla/pyjwt/commit/e6f48401001609a8f99e71fcaf355fb895d508a8"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-hxm8-2xgr-2p9m",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-hxm8-2xgr-2p9m"
}
],
"release_date": "2026-09-28T20:27:54.521000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "pyjwt: PyJWT: Token revocation bypass via non-canonical signature decoding"
},
{
"cve": "CVE-2026-102270",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-09-28T20:41:17.193200+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542686"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. An attacker can cause a Denial of Service (DoS) by providing crafted certificate-like input containing repeated start markers without matching end markers. This malformed input triggers excessive regular expression backtracking during validation in the is_pem_format function, consuming high central processing unit (CPU) resources and potentially making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Denial of Service via regular expression backtracking in is_pem_format",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate because although an attacker can trigger CPU exhaustion leading to denial of service, successful exploitation requires an application to accept and parse untrusted, attacker-supplied key or certificate input. In standard Red Hat product configurations, cryptographic verification keys are sourced from trusted local files or managed credential stores rather than arbitrary external inputs. As a result, typical deployments are not directly exposed unless an application explicitly ingests unvalidated key material.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102270"
},
{
"category": "external",
"summary": "RHBZ#2542686",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542686"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102270",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102270"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102270",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102270"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07",
"url": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p"
}
],
"release_date": "2026-09-28T20:29:24.479000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "pyjwt: pyjwt: Denial of Service via regular expression backtracking in is_pem_format"
},
{
"cve": "CVE-2026-102271",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:41:35.219179+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules (DER) format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code (HMAC) operations. If an application supports both asymmetric and symmetric signing algorithms, a remote attacker knowing the public key can exploit this flaw to forge valid authentication tokens and bypass access controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because an attacker can forge valid JSON Web Tokens and bypass authentication mechanisms if public cryptographic keys are mistakenly treated as shared secrets. Exploitation requires a specific application scenario where both asymmetric and HMAC algorithms are concurrently permitted during signature verification and public keys are provided in raw DER binary format. Typical Red Hat product integrations do not employ this vulnerable algorithm combination or key encoding by default, which restricts the overall attack surface in standard production environments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102271"
},
{
"category": "external",
"summary": "RHBZ#2542687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102271",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102271"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102271",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102271"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499",
"url": "https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773"
}
],
"release_date": "2026-09-28T20:31:53.066000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets"
},
{
"cve": "CVE-2026-102272",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:51:42.409127+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542695"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key (JWK) parser fails to normalize Unicode byte-order marks (BOM). In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to misidentify the public key as a shared symmetric secret. This flaw allows an attacker to forge authenticated JSON Web Tokens (JWT) and bypass authentication controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because successful exploitation permits an unauthenticated remote attacker to bypass authentication and forge valid tokens, though exploitation requires specific mixed-algorithm verification settings. In Red Hat environments, exposure is restricted to services that simultaneously allow both symmetric HMAC and asymmetric signature algorithms while parsing public keys that contain byte order marks. Workloads and services that enforce single-algorithm verification policies or utilize standard asymmetric key validation routines are not susceptible to this attack.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102272"
},
{
"category": "external",
"summary": "RHBZ#2542695",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542695"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102272",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102272"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102272",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102272"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291",
"url": "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947"
}
],
"release_date": "2026-09-28T20:36:31.530000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling"
},
{
"cve": "CVE-2026-102273",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:52:12.127939+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542697"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as Important because an attacker with access to a public verification key can forge cryptographic tokens to bypass authentication, allowing impersonation of privileged users and unauthorized access to protected application resources. Exploitation is limited to environments where applications concurrently permit symmetric HMAC and asymmetric algorithms while passing public key containers into validation routines.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102273"
},
{
"category": "external",
"summary": "RHBZ#2542697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542697"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102273"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95",
"url": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w"
}
],
"release_date": "2026-09-28T20:38:28.161000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets"
},
{
"cve": "CVE-2026-102274",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-09-28T20:50:54.553978+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542691"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyjwt. The library fails to properly handle errors when parsing a JSON Web Key (JWK) set that contains a malformed RSA key alongside valid keys. A remote attacker can supply or inject a malformed key to abort the processing of the entire key set, resulting in authentication failures and a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Denial of Service via malformed RSA key in JWK set",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate severity for Red Hat products because an attacker can only cause service disruptions without compromising cryptographic keys or bypassing signature validation. The issue is triggered when an application ingests an untrusted key bundle containing an invalid RSA entry, causing key set processing to terminate prematurely due to an unhandled exception. Because exploitation requires consuming malformed key sets from identity providers and only affects availability rather than enabling unauthorized access, the blast radius is contained.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102274"
},
{
"category": "external",
"summary": "RHBZ#2542691",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542691"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102274",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102274"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102274",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102274"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/8915570a0bfda9f0ff0e34e7fb09bdb9d71580cf",
"url": "https://github.com/jpadilla/pyjwt/commit/8915570a0bfda9f0ff0e34e7fb09bdb9d71580cf"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w6j9-cwv2-h6wq",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w6j9-cwv2-h6wq"
}
],
"release_date": "2026-09-28T20:42:28.355000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "pyjwt: pyjwt: Denial of Service via malformed RSA key in JWK set"
},
{
"cve": "CVE-2026-102275",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T21:01:28.250465+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542701"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. When importing an Octet Key Pair (OKP) private JSON Web Key (JWK), the library does not verify that the public key component matches the private key component. In applications that accept private key parameters from proof headers, a remote attacker can exploit this discrepancy to bypass token verification and use a stolen sender-constrained token without possessing the legitimate private key.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT: Token verification bypass via mismatched OKP key components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102275"
},
{
"category": "external",
"summary": "RHBZ#2542701",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542701"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102275",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102275"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102275",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102275"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/3cd9ceec33ced359decbad75b413ad668ae6332c",
"url": "https://github.com/jpadilla/pyjwt/commit/3cd9ceec33ced359decbad75b413ad668ae6332c"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.15.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.15.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-x33g-cr3x-6449",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-x33g-cr3x-6449"
}
],
"release_date": "2026-09-28T20:46:33.169000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "pyjwt: PyJWT: Token verification bypass via mismatched OKP key components"
},
{
"cve": "CVE-2026-103001",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-09-30T21:30:50.787448+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2544369"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyjwt. This vulnerability allows a remote attacker to bypass token validation checks when an application reuses an options configuration across multiple token decoding requests. Because the library unintentionally modifies the caller\u0027s shared configuration dictionary when signature verification is disabled, subsequent token verifications may retain disabled claim checks. As a result, an attacker could supply an expired or otherwise invalid JSON Web Token (JWT) that the application accepts as valid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Token validation bypass via options dictionary mutation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of this vulnerability in PyJWT. Applications that reuse a mutable options dictionary across decode operations may unintentionally disable registered-claim validation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-103001"
},
{
"category": "external",
"summary": "RHBZ#2544369",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544369"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-103001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-103001"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-103001",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103001"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/0c87c8c8b1a74cac99ad8115f3050efcb7fbed35",
"url": "https://github.com/jpadilla/pyjwt/commit/0c87c8c8b1a74cac99ad8115f3050efcb7fbed35"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/issues/679",
"url": "https://github.com/jpadilla/pyjwt/issues/679"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-gvp8-978c-rx2q",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-gvp8-978c-rx2q"
}
],
"release_date": "2026-09-30T21:15:12.862000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Until a fixed PyJWT version is available, create a new options dictionary for each decode() or decode_complete() call. Do not reuse a mutable options dictionary between calls with different verification settings.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "pyjwt: pyjwt: Token validation bypass via options dictionary mutation"
},
{
"cve": "CVE-2026-104874",
"cwe": {
"id": "CWE-911",
"name": "Improper Update of Reference Count"
},
"discovery_date": "2026-10-02T20:30:56.060026+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545386"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in multidict. The multidict C extension fails to release object references during certain items-view union and subtraction operations. An attacker could exploit this vulnerability by supplying crafted input sequences to applications performing these operations, triggering uncollectable memory leaks. This issue can cause unbounded process memory growth, ultimately leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "multidict: multidict: Denial of Service via memory leak in items-view operations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having Moderate impact for Red Hat products because triggering the memory leak requires an application to evaluate specific items-view set operations against untrusted user input, which is uncommon across standard deployments. While multiple Red Hat services bundle multidict, exploitation is limited to gradual memory exhaustion and denial of service, with no possibility of remote code execution or data disclosure. Furthermore, standard dictionary access patterns, forward unions, and intersections are not susceptible to this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-104874"
},
{
"category": "external",
"summary": "RHBZ#2545386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545386"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-104874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-104874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-104874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104874"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40",
"url": "https://github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/releases/tag/v6.9.1",
"url": "https://github.com/aio-libs/multidict/releases/tag/v6.9.1"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925",
"url": "https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925"
}
],
"release_date": "2026-10-02T20:21:50.903000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-13T06:58:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:82059",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:82059"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.5:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "multidict: multidict: Denial of Service via memory leak in items-view operations"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.