Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to data inference in Spring Data Relational [CVE-2026-41697]

Summary IBM Watson Speech Services Cartridge is vulnerable to data inference in Spring Data Relational, due to a failure to properly escape binding values of externally-controlled input hat can allow an attacker can supply wildcard characters CVE-2026-41697. Spring Data Relational, is used as par...

When LLM Defenses Backfire: Characterizing Safety, Performance, and Cost Trade-Offs

Jailbreak defenses are essential for protecting large language models LLMs, but they can also introduce secondary costs that weaken model utility. We present a systematic study of these defense trade-offs along three dimensions: performance impact, over-refusal on benign inputs, and inference cos...

api-inference-community (>=0.0.12, <=0.0.22), bent (>=0.0.9, <=0.0.27) potentially affected by CVE-2026-66007 via datasets (1.10.0)

datasets PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - api-inference-community =0.0.12, =0.0.9, =0.0.27 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

api-inference-community (>=0.0.12, <=0.0.22), bent (>=0.0.9, <=0.0.27) potentially affected by CVE-2026-66007 via datasets (1.10.0)

datasets PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - api-inference-community =0.0.12, =0.0.9, =0.0.27 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

CVE-2026-66005

CVE-2026-66005 affects Jan up to version 0.8.4. The local API server has a CORS misconfiguration that replaces user-configured trusted hosts with a wildcard, reflecting arbitrary origins with credentials. This enables network-adjacent attackers to bypass trusted host restrictions and reach the un...

CVE-2026-66005

Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that allows network-adjacent attackers to bypass trusted host restrictions by exploiting the server's replacement of user-configured trusted hosts with a wildcard that reflects...

PT-2026-64318

Name of the Vulnerable Software and Affected Versions Jan versions prior to 0.8.4 Description A CORS Cross-Origin Resource Sharing misconfiguration in the local API server allows network-adjacent attackers to bypass trusted host restrictions. This occurs because the server replaces user-configure...

caption-flow (>=0.5.0, <=0.5.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2026-54234 via vllm (>=0.19.0, <=0.23.0)

vllm PYPI version =0.19.0, =0.5.0, =2.5.3, =0.1.1.4, =2.1.2, =2.2.4 Source cves: CVE-2026-54234 Source advisory: OSV:PYSEC-2026-3542...

azureml-inference-server-http (>=0.4.9, <=0.5.4), iconrpcserver (>=1.7.0, <=1.7.2) +3 more potentially affected by CVE-2026-37737 via sanic-cors (1.0.1)

sanic-cors PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic-cors and may be impacted: - azureml-inference-server-http =0.4.9, =1.7.0, =3.0.0rc1, =3.0.0rc1, =1.0.5, =1.6.4 Source cves: CVE-2026-37737 Source advisory:...

CVE-2026-65701: Improper Limitation of a Pathname to a Restricted Directory

SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability in the full-song inference server that allows unauthenticated remote attackers to read and exfiltrate arbitrary files by supplying attacker-controlled filesystem paths through the audiopath field o...

Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability

This vulnerability allows local attackers to escape the model runner sandbox on affected installations of Docker Desktop for macOS. An attacker must first obtain the ability to execute low-privileged code within the sandbox in order to exploit this vulnerability. The specific flaw exists within t...

EUVD-2026-41925

vLLM denial of service via prompt embeds on M-RoPE models...

mlopspython-inference (>=67580760626172675.0.0, <=757069802391466481559610331145) potentially affected by CVE-2026-12484 via keras (2.12.0rc0)

keras PYPI version 2.12.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - mlopspython-inference =67580760626172675.0.0, =757069802391466481559610331145 Source cves: CVE-2026-12484 Source advisory: OSV:GHSA-V2W2-W228-C444...

lazyllm-verl (0.3.2.dev1), londonaicentre-mesa-local (>=2.8.0, <=2.8.1) +1 more potentially affected by CVE-2026-55646 via vllm (>=0.22.0, <=0.23.0)

vllm PYPI version =0.22.0, =2.8.0, =2.1.3, =2.2.4 Source cves: CVE-2026-55646 Source advisory: OSV:GHSA-V82G-2437-67M2...

caption-flow (>=0.5.0, <=0.5.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2026-54234 via vllm (>=0.19.0, <=0.23.0)

vllm PYPI version =0.19.0, =0.5.0, =2.5.3, =0.1.1.4, =2.1.2, =2.2.4 Source cves: CVE-2026-54234 Source advisory: GHSA-8WR5-JM2H-8R4F...

caption-flow (>=0.5.0, <=0.5.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2026-54234 via vllm (>=0.19.0, <=0.23.0)

vllm PYPI version =0.19.0, =0.5.0, =2.5.3, =0.1.1.4, =2.1.2, =2.2.4 Source cves: CVE-2026-54234 Source advisory: OSV:GHSA-8WR5-JM2H-8R4F...

Code-Poisoning Property Inference Attacks

The flourishing code hosting platforms and coding agents enable even beginners with private data to build tailored Machine Learning ML models using available code quickly. The training data for ML models, often regarded as private property e.g., clinical records, transaction information, is at...

CVE-2026-63086

text-generation-inference through 3.3.7 contains a server-side request forgery SSRF vulnerability in the OpenAI-compatible multimodal chat completions endpoint that allows unauthenticated network attackers to coerce the server into issuing arbitrary HTTP GET requests by supplying a crafted imageu...

CVE-2026-63086

The CVE-2026-63086 entry concerns text-generation-inference 3.3.7, with an SSRF flaw in the OpenAI-compatible multimodal chat completions endpoint. The fetch_image function in router/src/validation.rs does not validate addresses (private, loopback, link-local, or cloud metadata). The HTTP client ...

CVE-2026-63086

text-generation-inference through 3.3.7 contains a server-side request forgery SSRF vulnerability in the OpenAI-compatible multimodal chat completions endpoint that allows unauthenticated network attackers to coerce the server into issuing arbitrary HTTP GET requests by supplying a crafted imageu...