Database/AI/ML frameworks & serving
SGLang (`/server_info`): Endpoint returns API keys and SSL keyfile paths
CVSS 7.5CVE-2026-15977AI/ML frameworks & servingcurated
Impact
Endpoint returns API keys and SSL keyfile paths
Who can reach it
Network to the serving port with only --admin-* partly configured
What to do
Upgrade; rotate any keys exposed on a previously reachable instance
References
Related entries
- SGLang (weight exfiltration): Two endpoints allow a remote attacker to pull model weights when no API key is setCVE-2026-15978 · SGLang (weight exfiltration)High
- NVIDIA Triton Inference Server: unauthenticated request triggers excessive iteration and hangs the serverCVE-2026-16497 · NVIDIA Triton Inference Server for LinuxHigh
- Keras (HDF5 external links): Arbitrary local file read during model loadCVE-2026-1669 · Keras (HDF5 external links)High
- OpenShift AI Data Science Pipelines Operator: predictable PRNG generates MariaDB and MinIO credentialsCVE-2026-18611 · Red Hat OpenShift AI Data Science Pipelines Operator (generated MariaDB and MinIO credentials)High
- MLflow: unauthenticated arbitrary file read via prompt-tagged model version source pathCVE-2026-2614 · MLflow tracking server (`_create_model_version` / model version artifact handler)High
- Ray Dashboard: Path traversal in the dashboard static-file handler (port 8265)CVE-2026-32981 · Ray DashboardHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.