← voltar
CVE-2025-57622

CVE-2025-57622

CVSS 9.8 CRITICALEPSS 0.5%CWE-502
An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) component
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/stepfun-ai/Step-Video-T2V/blob/main/api/call_remote_server.pyhttps://github.com/stepfun-ai/Step-Video-T2V/issues/65