CVE-2026-10800: falha de baixa gravidade em PaddlePaddle FastDeploy
PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hash
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2epss 0.1%
A weakness has been identified in PaddlePaddle FastDeploy up to 2.4.1. Affected by this issue is the function hash_features of the file fastdeploy/multimodal/hasher.py of the component MultimodalHasher. Executing a manipulation can lead to use of weak hash. The attack requires local access. A high complexity level is associated with this attack. The exploitation is known to be difficult. This patch is called 374945747652a8d32965591c0c01a00c88b7067f. Applying a patch is advised to resolve this issue.
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
Produtos afetados
PaddlePaddle · FastDeployReferências
https://github.com/PaddlePaddle/FastDeploy/https://github.com/PaddlePaddle/FastDeploy/commit/374945747652a8d32965591c0c01a00c88b7067fhttps://github.com/PaddlePaddle/FastDeploy/issues/7196https://github.com/PaddlePaddle/FastDeploy/pull/7185https://vuldb.com/cve/CVE-2026-10800https://vuldb.com/submit/831452https://vuldb.com/vuln/368249https://vuldb.com/vuln/368249/cti