RHSA-2026:83116
Vulnerability from csaf_redhat - Published: 2026-10-14 19:02 - Updated: 2026-10-15 13:00Summary
Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.6 (cuda)
Severity
Important
Notes
Topic: Red Hat AI Inference Model Optimization Tools 3.4.6 (cuda) is now available.
Details: Red Hat AI Inference Model Optimization Tools
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Hugging Face Accelerate. This path traversal vulnerability exists in the `load_checkpoint_in_model` and `load_checkpoint_and_dispatch` functions due to a failure to sanitize `weight_map` entries from sharded checkpoint indexes. An attacker can exploit this by supplying relative paths with `../` sequences or absolute paths, leading to the ability to read arbitrary files or cause a denial of service by pointing shard entries at named pipes.
5.2 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy's TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.
7.4 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-69112
Threats
Impact
Important
A flaw was found in urllib3. A malicious server can trigger a Denial of Service (DoS) by returning a specially crafted compressed response containing trailing bytes. When streaming the response in chunks, the decompression logic can enter an infinite loop by repeatedly processing unconsumed data without making progress. This issue leads to excessive CPU utilization and prevents the affected network request from completing.
5.3 (Medium)
Affected products
Fixed
2 products, the same list as for
CVE-2026-69112
Threats
Impact
Moderate
A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-69112
Threats
Impact
Important
A flaw was found in fsspec. This vulnerability allows a remote attacker to execute arbitrary code by tricking an application into loading a maliciously crafted reference document, such as a Kerchunk metadata file. When the reference filesystem is opened, unrestricted template evaluation executes embedded expressions in the context of the running process.
8.8 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-69112
Threats
Impact
Important
A flaw was found in multidict. The multidict C extension fails to release object references during certain items-view union and subtraction operations. An attacker could exploit this vulnerability by supplying crafted input sequences to applications performing these operations, triggering uncollectable memory leaks. This issue can cause unbounded process memory growth, ultimately leading to a Denial of Service (DoS).
5.3 (Medium)
Affected products
Fixed
2 products, the same list as for
CVE-2026-69112
Threats
Impact
Moderate
References
56 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat AI Inference Model Optimization Tools 3.4.6 (cuda) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat AI Inference Model Optimization Tools",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:83116",
"url": "https://access.redhat.com/errata/RHSA-2026:83116"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-104851",
"url": "https://access.redhat.com/security/cve/CVE-2026-104851"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-104874",
"url": "https://access.redhat.com/security/cve/CVE-2026-104874"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-69112",
"url": "https://access.redhat.com/security/cve/CVE-2026-69112"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97687",
"url": "https://access.redhat.com/security/cve/CVE-2026-97687"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97688",
"url": "https://access.redhat.com/security/cve/CVE-2026-97688"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97689",
"url": "https://access.redhat.com/security/cve/CVE-2026-97689"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://www.redhat.com/en/products/ai/inference-server",
"url": "https://www.redhat.com/en/products/ai/inference-server"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83116.json"
}
],
"title": "Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.6 (cuda)",
"tracking": {
"current_release_date": "2026-10-15T13:00:30+00:00",
"generator": {
"date": "2026-10-15T13:00:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:83116",
"initial_release_date": "2026-10-14T19:02:57+00:00",
"revision_history": [
{
"date": "2026-10-14T19:02:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-14T19:03:02+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-15T13:00:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AI Inference Server 3.4",
"product": {
"name": "Red Hat AI Inference Server 3.4",
"product_id": "Red Hat AI Inference Server 3.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ai_inference_server:3.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat AI Inference Server"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"product": {
"name": "registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"product_id": "registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/model-opt-cuda-rhel9@sha256%3A94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1?arch=amd64\u0026repository_url=registry.redhat.io/rhaii/model-opt-cuda-rhel9\u0026tag=1791857110"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64",
"product": {
"name": "registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64",
"product_id": "registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64",
"product_identification_helper": {
"purl": "pkg:oci/model-opt-cuda-rhel9@sha256%3Ab10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859?arch=arm64\u0026repository_url=registry.redhat.io/rhaii/model-opt-cuda-rhel9\u0026tag=1791857110"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64 as a component of Red Hat AI Inference Server 3.4",
"product_id": "Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64"
},
"product_reference": "registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"relates_to_product_reference": "Red Hat AI Inference Server 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64 as a component of Red Hat AI Inference Server 3.4",
"product_id": "Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
},
"product_reference": "registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64",
"relates_to_product_reference": "Red Hat AI Inference Server 3.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-69112",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-08-10T19:21:07.797718+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2513620"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Hugging Face Accelerate. This path traversal vulnerability exists in the `load_checkpoint_in_model` and `load_checkpoint_and_dispatch` functions due to a failure to sanitize `weight_map` entries from sharded checkpoint indexes. An attacker can exploit this by supplying relative paths with `../` sequences or absolute paths, leading to the ability to read arbitrary files or cause a denial of service by pointing shard entries at named pipes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "accelerate: Hugging Face Accelerate: Path Traversal and Denial of Service via weight_map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Hugging Face Accelerate that could lead to arbitrary file disclosure and denial of service. While requiring user interaction, an attacker could craft malicious `weight_map` entries in sharded checkpoint indexes to exploit path traversal, impacting the confidentiality and availability of systems utilizing affected Red Hat AI/ML products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69112"
},
{
"category": "external",
"summary": "RHBZ#2513620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513620"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69112",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69112"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69112",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69112"
},
{
"category": "external",
"summary": "https://github.com/huggingface/accelerate/issues/4067",
"url": "https://github.com/huggingface/accelerate/issues/4067"
},
{
"category": "external",
"summary": "https://github.com/huggingface/accelerate/pull/4070",
"url": "https://github.com/huggingface/accelerate/pull/4070"
},
{
"category": "external",
"summary": "https://github.com/huggingface/accelerate/pull/4138",
"url": "https://github.com/huggingface/accelerate/pull/4138"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/hugging-face-accelerate-path-traversal-and-dos-via-weight-map",
"url": "https://www.vulncheck.com/advisories/hugging-face-accelerate-path-traversal-and-dos-via-weight-map"
}
],
"release_date": "2026-08-10T19:05:41.348000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:02:57+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83116",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83116"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "accelerate: Hugging Face Accelerate: Path Traversal and Denial of Service via weight_map"
},
{
"cve": "CVE-2026-97687",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-09-29T15:44:25.449046+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543255"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy\u0027s TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97687"
},
{
"category": "external",
"summary": "RHBZ#2543255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97687",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97687"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465",
"url": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3",
"url": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/pull/5093",
"url": "https://github.com/urllib3/urllib3/pull/5093"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77"
}
],
"release_date": "2026-09-29T15:30:27.136000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:02:57+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83116",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83116"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override"
},
{
"cve": "CVE-2026-97688",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-09-29T15:43:46.798686+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543253"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. A malicious server can trigger a Denial of Service (DoS) by returning a specially crafted compressed response containing trailing bytes. When streaming the response in chunks, the decompression logic can enter an infinite loop by repeatedly processing unconsumed data without making progress. This issue leads to excessive CPU utilization and prevents the affected network request from completing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97688"
},
{
"category": "external",
"summary": "RHBZ#2543253",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543253"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97688",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97688"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97688",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97688"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f",
"url": "https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g"
}
],
"release_date": "2026-09-29T15:32:17.622000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:02:57+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83116",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83116"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding"
},
{
"cve": "CVE-2026-97689",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-29T15:41:38.807723+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543245"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97689"
},
{
"category": "external",
"summary": "RHBZ#2543245",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543245"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97689",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97689"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed",
"url": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw"
}
],
"release_date": "2026-09-29T15:36:05.963000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:02:57+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83116",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83116"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser"
},
{
"cve": "CVE-2026-104851",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-10-02T16:51:40.330346+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545294"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fsspec. This vulnerability allows a remote attacker to execute arbitrary code by tricking an application into loading a maliciously crafted reference document, such as a Kerchunk metadata file. When the reference filesystem is opened, unrestricted template evaluation executes embedded expressions in the context of the running process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fsspec: fsspec: Arbitrary code execution via crafted reference documents",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-104851"
},
{
"category": "external",
"summary": "RHBZ#2545294",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545294"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-104851",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-104851"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-104851",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104851"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/commit/86438783f93b1398ef245b92f0e6063b445b611c",
"url": "https://github.com/fsspec/filesystem_spec/commit/86438783f93b1398ef245b92f0e6063b445b611c"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/commit/a1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8",
"url": "https://github.com/fsspec/filesystem_spec/commit/a1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/pull/2029",
"url": "https://github.com/fsspec/filesystem_spec/pull/2029"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/pull/2039",
"url": "https://github.com/fsspec/filesystem_spec/pull/2039"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/releases/tag/2026.6.0",
"url": "https://github.com/fsspec/filesystem_spec/releases/tag/2026.6.0"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/security/advisories/GHSA-27vj-qcqg-25rc",
"url": "https://github.com/fsspec/filesystem_spec/security/advisories/GHSA-27vj-qcqg-25rc"
}
],
"release_date": "2026-10-02T16:36:48.513000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:02:57+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83116",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83116"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fsspec: fsspec: Arbitrary code execution via crafted reference documents"
},
{
"cve": "CVE-2026-104874",
"cwe": {
"id": "CWE-911",
"name": "Improper Update of Reference Count"
},
"discovery_date": "2026-10-02T20:30:56.060026+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545386"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in multidict. The multidict C extension fails to release object references during certain items-view union and subtraction operations. An attacker could exploit this vulnerability by supplying crafted input sequences to applications performing these operations, triggering uncollectable memory leaks. This issue can cause unbounded process memory growth, ultimately leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "multidict: multidict: Denial of Service via memory leak in items-view operations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having Moderate impact for Red Hat products because triggering the memory leak requires an application to evaluate specific items-view set operations against untrusted user input, which is uncommon across standard deployments. While multiple Red Hat services bundle multidict, exploitation is limited to gradual memory exhaustion and denial of service, with no possibility of remote code execution or data disclosure. Furthermore, standard dictionary access patterns, forward unions, and intersections are not susceptible to this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-104874"
},
{
"category": "external",
"summary": "RHBZ#2545386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545386"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-104874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-104874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-104874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104874"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40",
"url": "https://github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/releases/tag/v6.9.1",
"url": "https://github.com/aio-libs/multidict/releases/tag/v6.9.1"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925",
"url": "https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925"
}
],
"release_date": "2026-10-02T20:21:50.903000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:02:57+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83116",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83116"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "multidict: multidict: Denial of Service via memory leak in items-view operations"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…