SUSE CVE-2026-34940

KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript function in internal/modelcontroller/engineollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components ref, modelParam. This shell command is executed via bash ...

CVE-2026-34940

creationtimestamp| type| source ---|---|--- 2026-03-31 12:11:14+00:00| published-proof-of-concept| https://github.com/kubeai-project/kubeai/security/advisories/GHSA-324q-cwx9-7crr 2026-04-14 21:25:30+00:00| published-proof-of-concept| Telegram/qw6naPQmOSFEqbc3iRVVM5dhGETt1a49wBj6uReZM5MuI0...