RHSA-2026:83121
Vulnerability from csaf_redhat - Published: 2026-10-14 19:04 - Updated: 2026-10-15 15:38Summary
Red Hat Security Advisory: Red Hat AI Inference 3.4.6 (rocm)
Severity
Important
Notes
Topic: Red Hat AI Inference 3.4.6 (rocm) is now available.
Details: Red Hat AI Inference
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Hugging Face PyTorch Image Models. A remote attacker could exploit a deserialization of untrusted data vulnerability by enticing a user to visit a malicious page or open a malicious file. This could lead to arbitrary code execution in the context of the current process. The flaw exists due to insufficient validation of user-supplied data during the parsing of checkpoints.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in vLLM. Remote attackers can exploit this vulnerability by providing a URL to an excessively large media file. The AsyncMediaIO.fetch_audio and AsyncMediaIO.fetch_image functions, responsible for fetching user-supplied media, do not limit the response size. This oversight allows an attacker to exhaust server memory, leading to a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in vLLM, a library for Large Language Model (LLM) inference and serving. A remote attacker, authorized to make a /v1/completions request, can send a specially crafted prompt embeds payload. This action causes the EngineCore to fail an assertion and fatally crash, leading to a Denial of Service (DoS) for the entire server application.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Moderate
A flaw was found in pyasn1, a generic ASN.1 library for Python. The Basic Encoding Rules (BER) decoder, used by CER and DER codecs, processes long-form tags by accumulating continuation octets without an upper bound. A remote attacker can exploit this by providing a specially crafted input, leading to the construction of an arbitrarily large integer. This can cause the CPU cost to grow quadratically, resulting in a Denial of Service (DoS) for any application decoding untrusted BER, CER, or DER input.
5.9 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Moderate
A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in Hugging Face Accelerate. This path traversal vulnerability exists in the `load_checkpoint_in_model` and `load_checkpoint_and_dispatch` functions due to a failure to sanitize `weight_map` entries from sharded checkpoint indexes. An attacker can exploit this by supplying relative paths with `../` sequences or absolute paths, leading to the ability to read arbitrary files or cause a denial of service by pointing shard entries at named pipes.
5.2 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Moderate
A flaw was found in peft. The LoRA-GA and CorDA initialization modules within Hugging Face peft improperly call `torch.load()` without the `weights_only=True` parameter. This oversight allows for full pickle deserialization when loading a malicious cache or covariance file. A remote attacker could exploit this by tricking a user into loading a specially crafted file, leading to arbitrary code execution on the affected system.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in vLLM. An unauthenticated attacker can exploit an input validation vulnerability by submitting negative token IDs to the /v1/embeddings and /pooling endpoints. This action triggers a CUDA device-side assertion, which poisons the GPU context and causes the engine to crash. Consequently, all subsequent requests will fail until the process is restarted, leading to a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy's TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in urllib3. A malicious server can trigger a Denial of Service (DoS) by returning a specially crafted compressed response containing trailing bytes. When streaming the response in chunks, the decompression logic can enter an infinite loop by repeatedly processing unconsumed data without making progress. This issue leads to excessive CPU utilization and prevents the affected network request from completing.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Moderate
A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in vLLM. The system fully downloads and decodes remote or embedded media files before enforcing configured size and quantity restrictions. A remote attacker can exploit this vulnerability by submitting requests containing excessively large or numerous media payloads, forcing the server to consume excessive memory and network bandwidth. This resource exhaustion can lead to a Denial of Service (DoS), rendering the service unresponsive or causing it to crash.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in fsspec. This vulnerability allows a remote attacker to execute arbitrary code by tricking an application into loading a maliciously crafted reference document, such as a Kerchunk metadata file. When the reference filesystem is opened, unrestricted template evaluation executes embedded expressions in the context of the running process.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in multidict. The multidict C extension fails to release object references during certain items-view union and subtraction operations. An attacker could exploit this vulnerability by supplying crafted input sequences to applications performing these operations, triggering uncollectable memory leaks. This issue can cause unbounded process memory growth, ultimately leading to a Denial of Service (DoS).
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Moderate
References
131 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat AI Inference 3.4.6 (rocm) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat AI Inference",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:83121",
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-100650",
"url": "https://access.redhat.com/security/cve/CVE-2026-100650"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102273",
"url": "https://access.redhat.com/security/cve/CVE-2026-102273"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-104851",
"url": "https://access.redhat.com/security/cve/CVE-2026-104851"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-104874",
"url": "https://access.redhat.com/security/cve/CVE-2026-104874"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15679",
"url": "https://access.redhat.com/security/cve/CVE-2026-15679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-37237",
"url": "https://access.redhat.com/security/cve/CVE-2026-37237"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55514",
"url": "https://access.redhat.com/security/cve/CVE-2026-55514"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59884",
"url": "https://access.redhat.com/security/cve/CVE-2026-59884"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59885",
"url": "https://access.redhat.com/security/cve/CVE-2026-59885"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59886",
"url": "https://access.redhat.com/security/cve/CVE-2026-59886"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-69112",
"url": "https://access.redhat.com/security/cve/CVE-2026-69112"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-71281",
"url": "https://access.redhat.com/security/cve/CVE-2026-71281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-93592",
"url": "https://access.redhat.com/security/cve/CVE-2026-93592"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97687",
"url": "https://access.redhat.com/security/cve/CVE-2026-97687"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97688",
"url": "https://access.redhat.com/security/cve/CVE-2026-97688"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97689",
"url": "https://access.redhat.com/security/cve/CVE-2026-97689"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://www.redhat.com/en/products/ai/inference-server",
"url": "https://www.redhat.com/en/products/ai/inference-server"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83121.json"
}
],
"title": "Red Hat Security Advisory: Red Hat AI Inference 3.4.6 (rocm)",
"tracking": {
"current_release_date": "2026-10-15T15:38:06+00:00",
"generator": {
"date": "2026-10-15T15:38:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:83121",
"initial_release_date": "2026-10-14T19:04:22+00:00",
"revision_history": [
{
"date": "2026-10-14T19:04:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-14T19:04:27+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-15T15:38:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AI Inference Server 3.4",
"product": {
"name": "Red Hat AI Inference Server 3.4",
"product_id": "Red Hat AI Inference Server 3.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ai_inference_server:3.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat AI Inference Server"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64",
"product": {
"name": "registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64",
"product_id": "registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vllm-rocm-rhel9@sha256%3A7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852?arch=amd64\u0026repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9\u0026tag=1791856725"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64 as a component of Red Hat AI Inference Server 3.4",
"product_id": "Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
},
"product_reference": "registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64",
"relates_to_product_reference": "Red Hat AI Inference Server 3.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-15679",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-08-20T16:46:50.721906+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520600"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Hugging Face PyTorch Image Models. A remote attacker could exploit a deserialization of untrusted data vulnerability by enticing a user to visit a malicious page or open a malicious file. This could lead to arbitrary code execution in the context of the current process. The flaw exists due to insufficient validation of user-supplied data during the parsing of checkpoints.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "timm: Hugging Face PyTorch Image Models: Remote Code Execution via Deserialization of Untrusted Data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15679"
},
{
"category": "external",
"summary": "RHBZ#2520600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520600"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15679"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-523/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-523/"
}
],
"release_date": "2026-08-20T16:24:53.352000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "timm: Hugging Face PyTorch Image Models: Remote Code Execution via Deserialization of Untrusted Data"
},
{
"cve": "CVE-2026-37237",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-28T15:32:49.244896+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2525629"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM. Remote attackers can exploit this vulnerability by providing a URL to an excessively large media file. The AsyncMediaIO.fetch_audio and AsyncMediaIO.fetch_image functions, responsible for fetching user-supplied media, do not limit the response size. This oversight allows an attacker to exhaust server memory, leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via memory exhaustion from oversized media files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-37237"
},
{
"category": "external",
"summary": "RHBZ#2525629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-37237",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-37237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-37237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-37237"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/blob/main/vllm/multimodal/inputs.py",
"url": "https://github.com/vllm-project/vllm/blob/main/vllm/multimodal/inputs.py"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/36506",
"url": "https://github.com/vllm-project/vllm/pull/36506"
},
{
"category": "external",
"summary": "https://s00me00ne.com/cve/cve-2026-37237/",
"url": "https://s00me00ne.com/cve/cve-2026-37237/"
}
],
"release_date": "2026-08-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Denial of Service via memory exhaustion from oversized media files"
},
{
"cve": "CVE-2026-55514",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-07-06T21:01:24.119563+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497504"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, a library for Large Language Model (LLM) inference and serving. A remote attacker, authorized to make a /v1/completions request, can send a specially crafted prompt embeds payload. This action causes the EngineCore to fail an assertion and fatally crash, leading to a Denial of Service (DoS) for the entire server application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via crafted prompt in /v1/completions request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate-impact flaw in vLLM, as used in Red Hat AI Inference Server, Red Hat OpenShift AI, and Red Hat Enterprise Linux AI, allows a remote, authenticated attacker to trigger a denial of service. By sending a specially crafted prompt embeds payload to the `/v1/completions` endpoint with a model utilizing M-RoPE, the attacker can cause the EngineCore to crash, leading to the unavailability of the server application. This issue requires prior authorization to make requests to the `/v1/completions` endpoint.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55514"
},
{
"category": "external",
"summary": "RHBZ#2497504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55514",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55514"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55514",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55514"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/470229c37efaf69c86e8bc97482b0b1ff7551c65",
"url": "https://github.com/vllm-project/vllm/commit/470229c37efaf69c86e8bc97482b0b1ff7551c65"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/45252",
"url": "https://github.com/vllm-project/vllm/pull/45252"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/releases/tag/v0.24.0",
"url": "https://github.com/vllm-project/vllm/releases/tag/v0.24.0"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-33cg-gxv8-3p8g",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-33cg-gxv8-3p8g"
}
],
"release_date": "2026-07-06T20:07:40.405000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vllm: vLLM: Denial of Service via crafted prompt in /v1/completions request"
},
{
"cve": "CVE-2026-59884",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T18:07:49.497763+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. The Basic Encoding Rules (BER) decoder, used by CER and DER codecs, processes long-form tags by accumulating continuation octets without an upper bound. A remote attacker can exploit this by providing a specially crafted input, leading to the construction of an arbitrarily large integer. This can cause the CPU cost to grow quadratically, resulting in a Denial of Service (DoS) for any application decoding untrusted BER, CER, or DER input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyasn1: pyasn1: Denial of Service via crafted BER input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in pyasn1\u0027s BER decoder. The decoder parses long-form tags by accumulating continuation octets without an upper bound, allowing crafted input to force construction of an arbitrarily large integer with quadratic CPU cost. On Python 3.11+, this can also trigger unhandled ValueError exceptions. Exploitation requires that an application passes untrusted BER, CER, or DER input directly to the pyasn1 decoder \u2014 pyasn1 is a library and does not independently accept network input. Many common uses of pyasn1 involve parsing trusted certificates or local configuration and are not exposed to this flaw. The realistic impact is a denial-of-service of the consuming Python process, with automatic recovery in typical service deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59884"
},
{
"category": "external",
"summary": "RHBZ#2500204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59884",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59884"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59884",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59884"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5",
"url": "https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j"
}
],
"release_date": "2026-07-14T16:41:10.277000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
},
{
"category": "workaround",
"details": "Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) \u2014 an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python-pyasn1: pyasn1: Denial of Service via crafted BER input"
},
{
"cve": "CVE-2026-59885",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-07-14T18:17:12.157807+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500380"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in pyasn1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A small crafted payload containing an OID with many arcs consumes excessive CPU per decode() call, allowing denial of service in applications that decode untrusted ASN.1 data (certificates, LDAP, SNMP, Kerberos). The corresponding encoders exhibit the same behavior when re-encoding attacker-supplied values. The arc-size limit introduced for CVE-2026-23490 does not mitigate this issue. This issue is fixed in pyasn1 version 0.6.4.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59885"
},
{
"category": "external",
"summary": "RHBZ#2500380",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500380"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59885",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59885"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",
"url": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"
}
],
"release_date": "2026-07-14T16:40:00.515000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
},
{
"category": "workaround",
"details": "Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) \u2014 an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER"
},
{
"cve": "CVE-2026-59886",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T17:01:19.689422+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500041"
}
],
"notes": [
{
"category": "description",
"text": "A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in pyasn1, rated as Important, could lead to a denial of service in Red Hat products that process untrusted ASN.1 data. A remote attacker could send a specially crafted BER, CER, or DER encoded REAL value with a large exponent, causing applications to consume excessive resources during decoding operations such as printing, logging, or arithmetic, thereby rendering the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59886"
},
{
"category": "external",
"summary": "RHBZ#2500041",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500041"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59886"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886",
"url": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r"
}
],
"release_date": "2026-07-14T16:38:29.691000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
},
{
"category": "workaround",
"details": "When processing untrusted ASN.1 data with pyasn1, avoid calling prettyPrint(), str(), float(), int(), or performing comparisons or arithmetic on decoded Real (ASN.1 REAL type) objects. Instead, inspect the raw (mantissa, base, exponent) tuple directly. Where logging decoded ASN.1 structures is necessary, filter out or sanitize Real-typed values before conversion.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values"
},
{
"cve": "CVE-2026-69112",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-08-10T19:21:07.797718+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2513620"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Hugging Face Accelerate. This path traversal vulnerability exists in the `load_checkpoint_in_model` and `load_checkpoint_and_dispatch` functions due to a failure to sanitize `weight_map` entries from sharded checkpoint indexes. An attacker can exploit this by supplying relative paths with `../` sequences or absolute paths, leading to the ability to read arbitrary files or cause a denial of service by pointing shard entries at named pipes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "accelerate: Hugging Face Accelerate: Path Traversal and Denial of Service via weight_map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Hugging Face Accelerate that could lead to arbitrary file disclosure and denial of service. While requiring user interaction, an attacker could craft malicious `weight_map` entries in sharded checkpoint indexes to exploit path traversal, impacting the confidentiality and availability of systems utilizing affected Red Hat AI/ML products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69112"
},
{
"category": "external",
"summary": "RHBZ#2513620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513620"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69112",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69112"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69112",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69112"
},
{
"category": "external",
"summary": "https://github.com/huggingface/accelerate/issues/4067",
"url": "https://github.com/huggingface/accelerate/issues/4067"
},
{
"category": "external",
"summary": "https://github.com/huggingface/accelerate/pull/4070",
"url": "https://github.com/huggingface/accelerate/pull/4070"
},
{
"category": "external",
"summary": "https://github.com/huggingface/accelerate/pull/4138",
"url": "https://github.com/huggingface/accelerate/pull/4138"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/hugging-face-accelerate-path-traversal-and-dos-via-weight-map",
"url": "https://www.vulncheck.com/advisories/hugging-face-accelerate-path-traversal-and-dos-via-weight-map"
}
],
"release_date": "2026-08-10T19:05:41.348000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "accelerate: Hugging Face Accelerate: Path Traversal and Denial of Service via weight_map"
},
{
"cve": "CVE-2026-71281",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-08-05T14:04:18.283494+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2511563"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in peft. The LoRA-GA and CorDA initialization modules within Hugging Face peft improperly call `torch.load()` without the `weights_only=True` parameter. This oversight allows for full pickle deserialization when loading a malicious cache or covariance file. A remote attacker could exploit this by tricking a user into loading a specially crafted file, leading to arbitrary code execution on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "peft: peft: Arbitrary Code Execution via Unsafe Deserialization in LoRA-GA and CorDA Modules",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat ships Hugging Face peft (versions up to 0.19.1, all within the vulnerable range) across multiple AI/ML product images: OpenShift AI (RHOAI), the AI Inference Server (vLLM ROCm), RHEL AI, and Lightspeed Stack. The LoRA-GA and CorDA initialization modules call torch.load() on config-specified cache/covariance files without weights_only=True, enabling full pickle deserialization and arbitrary code execution if a malicious cache file is loaded. Resolution is delegated to each image\u0027s maintainers to update the pinned peft dependency; trackers have been filed against all affected streams.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-71281"
},
{
"category": "external",
"summary": "RHBZ#2511563",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511563"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-71281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71281"
},
{
"category": "external",
"summary": "https://github.com/huggingface/peft",
"url": "https://github.com/huggingface/peft"
},
{
"category": "external",
"summary": "https://github.com/huggingface/peft/blob/main/src/peft/tuners/lora/corda.py",
"url": "https://github.com/huggingface/peft/blob/main/src/peft/tuners/lora/corda.py"
}
],
"release_date": "2026-08-05T12:26:27.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
},
{
"category": "workaround",
"details": "Do not load LoRA-GA or CorDA cache/covariance files from untrusted or unverified sources; only use cache files generated in your own trusted training environment. Upgrade to a peft release newer than 0.19.1 once available in the affected image.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "peft: peft: Arbitrary Code Execution via Unsafe Deserialization in LoRA-GA and CorDA Modules"
},
{
"cve": "CVE-2026-93592",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-09-22T18:39:16.640215+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2538478"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM. An unauthenticated attacker can exploit an input validation vulnerability by submitting negative token IDs to the /v1/embeddings and /pooling endpoints. This action triggers a CUDA device-side assertion, which poisons the GPU context and causes the engine to crash. Consequently, all subsequent requests will fail until the process is restarted, leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via negative token ID input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has evaluated this vulnerability as having an Important severity because an unauthenticated remote attacker can completely disrupt the inference engine with a single payload. In Red Hat OpenShift AI and Red Hat AI Inference Server deployments exposing embedding or pooling models, processing negative token inputs causes an unrecoverable GPU context failure. This fault halts the entire serving process and prevents subsequent client requests from being handled until the container or process is restarted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93592"
},
{
"category": "external",
"summary": "RHBZ#2538478",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538478"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93592",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93592"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93592",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93592"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-25q3-v2hm-8vpf",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-25q3-v2hm-8vpf"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-negative-token-id",
"url": "https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-negative-token-id"
}
],
"release_date": "2026-09-18T13:20:05.365000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
},
{
"category": "workaround",
"details": "Restrict access to the inference service or filter requests at an upstream reverse proxy or API gateway:\n\n1. Limit network access: Deploy firewall rules or OpenShift NetworkPolicies so that the inference server ports and endpoints are accessible only by authenticated, trusted internal clients.\n2. Ingress request validation: Configure an API gateway or reverse proxy placed in front of the model server to inspect request payloads for the `/v1/embeddings` and `/pooling` endpoints, rejecting requests where the `input` array contains negative numbers, or restricting untrusted clients to submitting text prompt strings rather than raw token lists.\n\nCaveats: Inspecting request bodies at an intermediary gateway layer may introduce slight processing latency. Modifying reverse proxy rules or applying network policies may require a service configuration reload or restart, which can temporarily disrupt in-flight connections.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Denial of Service via negative token ID input"
},
{
"cve": "CVE-2026-97687",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-09-29T15:44:25.449046+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543255"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy\u0027s TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97687"
},
{
"category": "external",
"summary": "RHBZ#2543255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97687",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97687"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465",
"url": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3",
"url": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/pull/5093",
"url": "https://github.com/urllib3/urllib3/pull/5093"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77"
}
],
"release_date": "2026-09-29T15:30:27.136000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override"
},
{
"cve": "CVE-2026-97688",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-09-29T15:43:46.798686+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543253"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. A malicious server can trigger a Denial of Service (DoS) by returning a specially crafted compressed response containing trailing bytes. When streaming the response in chunks, the decompression logic can enter an infinite loop by repeatedly processing unconsumed data without making progress. This issue leads to excessive CPU utilization and prevents the affected network request from completing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97688"
},
{
"category": "external",
"summary": "RHBZ#2543253",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543253"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97688",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97688"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97688",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97688"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f",
"url": "https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g"
}
],
"release_date": "2026-09-29T15:32:17.622000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding"
},
{
"cve": "CVE-2026-97689",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-29T15:41:38.807723+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543245"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97689"
},
{
"category": "external",
"summary": "RHBZ#2543245",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543245"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97689",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97689"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed",
"url": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw"
}
],
"release_date": "2026-09-29T15:36:05.963000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser"
},
{
"cve": "CVE-2026-100650",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-26T13:41:54.839516+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2541909"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM. The system fully downloads and decodes remote or embedded media files before enforcing configured size and quantity restrictions. A remote attacker can exploit this vulnerability by submitting requests containing excessively large or numerous media payloads, forcing the server to consume excessive memory and network bandwidth. This resource exhaustion can lead to a Denial of Service (DoS), rendering the service unresponsive or causing it to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via unbounded media ingestion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity flaw because it can be triggered remotely without authentication to crash the inference service via resource exhaustion, completely disrupting model serving availability. In Red Hat Enterprise Linux AI and OpenShift AI environments, deployments hosting vLLM handle multi-modal requests or tokenization operations where input acquisition occurs prior to applying payload size constraints. Because excessive system memory and outbound bandwidth can be consumed before request rejection occurs, an adversary can exhaust container resources, though the flaw does not allow code execution or data exposure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-100650"
},
{
"category": "external",
"summary": "RHBZ#2541909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-100650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100650"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-100650",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100650"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/752a3a504485790a2e8491cacbb35c137339ad34",
"url": "https://github.com/vllm-project/vllm/commit/752a3a504485790a2e8491cacbb35c137339ad34"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-p6g9-7v3x-m8mv",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-p6g9-7v3x-m8mv"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/vllm-before-0.29.0-resource-exhaustion-via-unbounded-media-materialization",
"url": "https://www.vulncheck.com/advisories/vllm-before-0.29.0-resource-exhaustion-via-unbounded-media-materialization"
}
],
"release_date": "2026-09-26T13:23:20.418000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
},
{
"category": "workaround",
"details": "Limit network exposure to the vLLM inference service and block outbound network connections from the serving host or container to prevent fetching untrusted external media:\n\n1. Restrict inbound access using firewall rules so only trusted client networks or API gateways can reach the inference port (e.g., port 8000):\n# firewall-cmd --zone=public --remove-port=8000/tcp --permanent\n# firewall-cmd --zone=trusted --add-source=\u003cTRUSTED_IP_OR_CIDR\u003e --permanent\n# firewall-cmd --reload\n\n2. In OpenShift AI environments, apply a Kubernetes NetworkPolicy to the pod namespace to restrict ingress traffic strictly to authorized proxy pods, and apply an egress rule that blocks outbound internet access, preventing the service from downloading arbitrary remote media URLs.\n\n3. Enforce maximum request body size limits on upstream reverse proxies or ingress controllers to drop oversized inline base64 payloads before forwarding requests to the inference backend.\n\nCaveats:\nRestricting egress traffic will prevent valid remote media references from being processed if external multi-modal inputs are expected. Modifying firewall rules or reloading network services may briefly interrupt active connections.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Denial of Service via unbounded media ingestion"
},
{
"cve": "CVE-2026-102273",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:52:12.127939+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542697"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as Important because an attacker with access to a public verification key can forge cryptographic tokens to bypass authentication, allowing impersonation of privileged users and unauthorized access to protected application resources. Exploitation is limited to environments where applications concurrently permit symmetric HMAC and asymmetric algorithms while passing public key containers into validation routines.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102273"
},
{
"category": "external",
"summary": "RHBZ#2542697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542697"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102273"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95",
"url": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w"
}
],
"release_date": "2026-09-28T20:38:28.161000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets"
},
{
"cve": "CVE-2026-104851",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-10-02T16:51:40.330346+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545294"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fsspec. This vulnerability allows a remote attacker to execute arbitrary code by tricking an application into loading a maliciously crafted reference document, such as a Kerchunk metadata file. When the reference filesystem is opened, unrestricted template evaluation executes embedded expressions in the context of the running process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fsspec: fsspec: Arbitrary code execution via crafted reference documents",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-104851"
},
{
"category": "external",
"summary": "RHBZ#2545294",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545294"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-104851",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-104851"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-104851",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104851"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/commit/86438783f93b1398ef245b92f0e6063b445b611c",
"url": "https://github.com/fsspec/filesystem_spec/commit/86438783f93b1398ef245b92f0e6063b445b611c"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/commit/a1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8",
"url": "https://github.com/fsspec/filesystem_spec/commit/a1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/pull/2029",
"url": "https://github.com/fsspec/filesystem_spec/pull/2029"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/pull/2039",
"url": "https://github.com/fsspec/filesystem_spec/pull/2039"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/releases/tag/2026.6.0",
"url": "https://github.com/fsspec/filesystem_spec/releases/tag/2026.6.0"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/security/advisories/GHSA-27vj-qcqg-25rc",
"url": "https://github.com/fsspec/filesystem_spec/security/advisories/GHSA-27vj-qcqg-25rc"
}
],
"release_date": "2026-10-02T16:36:48.513000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fsspec: fsspec: Arbitrary code execution via crafted reference documents"
},
{
"cve": "CVE-2026-104874",
"cwe": {
"id": "CWE-911",
"name": "Improper Update of Reference Count"
},
"discovery_date": "2026-10-02T20:30:56.060026+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545386"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in multidict. The multidict C extension fails to release object references during certain items-view union and subtraction operations. An attacker could exploit this vulnerability by supplying crafted input sequences to applications performing these operations, triggering uncollectable memory leaks. This issue can cause unbounded process memory growth, ultimately leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "multidict: multidict: Denial of Service via memory leak in items-view operations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having Moderate impact for Red Hat products because triggering the memory leak requires an application to evaluate specific items-view set operations against untrusted user input, which is uncommon across standard deployments. While multiple Red Hat services bundle multidict, exploitation is limited to gradual memory exhaustion and denial of service, with no possibility of remote code execution or data disclosure. Furthermore, standard dictionary access patterns, forward unions, and intersections are not susceptible to this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-104874"
},
{
"category": "external",
"summary": "RHBZ#2545386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545386"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-104874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-104874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-104874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104874"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40",
"url": "https://github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/releases/tag/v6.9.1",
"url": "https://github.com/aio-libs/multidict/releases/tag/v6.9.1"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925",
"url": "https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925"
}
],
"release_date": "2026-10-02T20:21:50.903000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:04:22+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83121",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83121"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "multidict: multidict: Denial of Service via memory leak in items-view operations"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.