Database/AI/ML frameworks & serving
skops: Method-handling inconsistency
CVSS 8.7CVE-2025-54413AI/ML frameworks & servingcurated
Impact
Method-handling inconsistency → safe-loader bypass
Who can reach it
Customer-supplied model file
What to do
Upgrade past 0.11.0
References
Related entries
- SGLang: duplicate bootstrap_room values crash or hang the disaggregated schedulerCVE-2026-102634 · SGLang prefill/decode disaggregation (Mooncake KV transfer, bootstrap_room)High
- LightLLM: unbounded key-value writes on the NCCL control channel exhaust worker memoryCVE-2026-103042 · LightLLM NCCL KV-transfer control channel (exposed_set_value)High
- Mooncake transfer engine: zero-length handshake frame crashes the hosting inference processCVE-2026-104433 · Mooncake transfer engine (P2P handshake readString)High
- KubeAI (Ollama engine controller): Injection in `ollamaStartupProbeScript()`CVE-2026-34940 · KubeAI (Ollama engine controller)High
- Xinference: model launch API executes attacker-supplied Python because trust_remote_code is always onCVE-2026-76841 · Xinference (Xorbits Inference) model loaders - trust_remote_codeHigh
- Ollama: model pull follows cross-host redirects, giving SSRF to internal and metadata endpointsCVE-2026-85180 · Ollama (tensor-layer blob download, cross-host redirect handling)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.