GHSA-HXM8-2XGR-2P9M vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, open-webui, openstack-keystone-2025.2, datahub-ingestion-fips, superset, nemo-rl-cuda-13.0, openstack-glance-2025.1-fips, openstack-cinder-2026.1, openstack-manila-2025.2, authentik-fips, openstack-placement-2025.2,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, open-webui, openstack-keystone-2025.2, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, authentik-fips, kserve-xgbserver, kubeflow-pipelines-visualization-server, ansible-operator-fips, chroma, kserve-sklearnserver,...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, open-webui, openstack-keystone-2025.2, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, authentik-fips, kserve-xgbserver, kubeflow-pipelines-visualization-server, ansible-operator-fips, chroma, kserve-sklearnserver,...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, open-webui, openstack-keystone-2025.2, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, authentik-fips, kserve-xgbserver, kubeflow-pipelines-visualization-server, ansible-operator-fips, chroma, kserve-sklearnserver,...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, open-webui, openstack-keystone-2025.2, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, authentik-fips, kserve-xgbserver, kubeflow-pipelines-visualization-server, ansible-operator-fips, chroma, kserve-sklearnserver,...

GHSA-W6J9-CWV2-H6WQ vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, open-webui, openstack-keystone-2025.2, datahub-ingestion-fips, superset, nemo-rl-cuda-13.0, openstack-glance-2025.1-fips, openstack-cinder-2026.1, openstack-manila-2025.2, authentik-fips, openstack-placement-2025.2,...

CVE-2026-102271 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, open-webui, openstack-keystone-2025.2, datahub-ingestion-fips, superset, nemo-rl-cuda-13.0, openstack-glance-2025.1-fips, openstack-cinder-2026.1, openstack-manila-2025.2, authentik-fips, openstack-placement-2025.2,...

CVE-2026-102274 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, open-webui, openstack-keystone-2025.2, datahub-ingestion-fips, superset, nemo-rl-cuda-13.0, openstack-glance-2025.1-fips, openstack-cinder-2026.1, openstack-manila-2025.2, authentik-fips, openstack-placement-2025.2,...

GHSA-P4G4-X82P-Q773 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, open-webui, openstack-keystone-2025.2, datahub-ingestion-fips, superset, nemo-rl-cuda-13.0, openstack-glance-2025.1-fips, openstack-cinder-2026.1, openstack-manila-2025.2, authentik-fips, openstack-placement-2025.2,...

GHSA-2GX3-RCP4-G85Q vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, open-webui, openstack-keystone-2025.2, datahub-ingestion-fips, superset, nemo-rl-cuda-13.0, openstack-glance-2025.1-fips, openstack-cinder-2026.1, openstack-manila-2025.2, authentik-fips, openstack-placement-2025.2,...

CVE-2026-103270

LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pausegeneration, /abortrequest, /flushcache, and /initweightsupdategroup to disrupt inference operations and wedge workers o...

CVE-2026-103270

LightLLM versions up to and including 1.2.0 are vulnerable to a missing authentication flaw on reinforcement learning (RL) control routes. When deployments are started with the --enable_rl flag, the software mounts specific control routes on the public HTTP API without requiring authentication ch...

CVE-2026-103270 LightLLM through 1.2.0 Missing Authentication on RL Control Routes

LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pausegeneration, /abortrequest, /flushcache, and /initweightsupdategroup to disrupt inference operations and wedge workers o...

EUVD-2026-89989

LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pausegeneration, /abortrequest, /flushcache, and /initweightsupdategroup to disrupt inference operations and wedge workers o...

CVE-2026-103270 LightLLM through 1.2.0 Missing Authentication on RL Control Routes

LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pausegeneration, /abortrequest, /flushcache, and /initweightsupdategroup to disrupt inference operations and wedge workers o...

Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (rocm)

Red Hat AI Inference Server 3.2.2 rocm is now available. Red Hat® AI Inference Server...

Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (cuda)

Red Hat AI Inference Server 3.2.2 cuda is now available. Red Hat® AI Inference Server...

Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)

Red Hat AI Inference Server Model Optimization Tools 3.2.2 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...

CVE-2026-103270: Missing Authentication for Critical Function

LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pausegeneration, /abortrequest, /flushcache, and /initweightsupdategroup to disrupt inference operations and wedge workers o...

Link Inference Attack on Privacy-Preserving Knowledge Graphs

Knowledge Graphs KGs are widely used to store and share structured information across sensitive domains such as healthcare, fi- nance, and social networks. A common privacy practice is to delete sen- sitive relations before publishing the graph, under the assumption that removing edges is...