CVE-2026-34940

CVE-2026-34940 — Iniezione di Comandi nel Sistema Operativo in KubeAI tramite URL del Modello nel probe di avvio di Ollama Gravità : Alta CVSS 8.7 CWE : CWE-78 — Neutralizzazione Impropria di Elementi Speciali utilizzati in un Comando del Sistema Operativo Componente interessato :...

Regular Expression without Anchors

Overview Affected versions of this package are vulnerable to Regular Expression without Anchors in the parseModelURL function in Ollama Engine startup probe that allows shell metacharacters like ;, |, $, and backticks. An attacker can execute arbitrary operating system commands by supplying a...

GO-2026-4920 KubeAI: OS Command Injection via Model URL in Ollama Engine startup probe allows arbitrary command execution in model pods in github.com/kubeai-project/kubeai

KubeAI: OS Command Injection via Model URL in Ollama Engine startup probe allows arbitrary command execution in model pods in github.com/kubeai-project/kubeai...