Vulnerabilities in xorbitsai

5 results

CVE-2026-61539CRITICALXinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsingEPSS 1.2%CVE-2026-76841HIGHXinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model LoadersEPSS 1.0%CVE-2026-49950CRITICALXorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor PoolEPSS 0.9%CVE-2026-85668HIGHXinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-registerEPSS 0.6%CVE-2026-112051HIGHXinference through 4.0.1 Path Traversal via model_name in Custom Model RegistrationEPSS 0.4%