CVE-2026-119120 Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name

Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy modelname field in untrusted Docker API request bodies, allowing authenticated clients to choose which HuggingFace model the server loads. Attackers can reference a malicious repository with a pickle weight file to execute Python...

CVE-2026-119120

The Crawl4AI library (versions 0.9.0 through 0.9.5 ) is vulnerable to untrusted model loading because it fails to filter the CosineStrategy model_name field within Docker API request bodies. This flaw allows authenticated clients to force the server to load a specific HuggingFace model. An attack...

CVE-2026-119120 Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name

Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy modelname field in untrusted Docker API request bodies, allowing authenticated clients to choose which HuggingFace model the server loads. Attackers can reference a malicious repository with a pickle weight file to execute Python...

CVE-2026-119120: unclecode crawl4ai: Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request…

Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy modelname field in untrusted Docker API request bodies, allowing authenticated clients to choose which HuggingFace model the server loads. Attackers can reference a malicious repository with a pickle weight file to execute Python...

CVE-2026-112051

Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in modelname. Attackers can register a persisted custom model through POST /v1/modelregistrations/modeltype with name...

CVE-2026-112051 Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration

Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in modelname. Attackers can register a persisted custom model through POST /v1/modelregistrations/modeltype with name...

CVE-2026-112051

Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in modelname. Attackers can register a persisted custom model through POST /v1/modelregistrations/modeltype with name...

CVE-2026-112051

Xinference versions through 4.0.1 are vulnerable to a path traversal vulnerability on Windows systems. This flaw allows unauthenticated attackers to write or delete arbitrary .json files by using backslash sequences within the model_name parameter. Specifically, an attacker can register a persist...

CVE-2026-112051 Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration

Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in modelname. Attackers can register a persisted custom model through POST /v1/modelregistrations/modeltype with name...

EUVD-2026-103513

Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in modelname. Attackers can register a persisted custom model through POST /v1/modelregistrations/modeltype with name...

CVE-2026-112051 Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration

Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in modelname. Attackers can register a persisted custom model through POST /v1/modelregistrations/modeltype with name...

CVE-2026-112051: Improper Limitation of a Pathname to a Restricted Directory

Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in modelname. Attackers can register a persisted custom model through POST /v1/modelregistrations/modeltype with name...

Xorbits Inference Path Traversal Vulnerability

Xorbits Inference versions 4.0.1 and earlier have a path traversal vulnerability. This vulnerability arises due to the backslash sequence in the modelname parameter on Windows, which allows for path traversal. Unauthenticated attackers can register persistent custom models via POST...

CVE-2026-24698: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the savesyslogtofile function of the "httpd" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The modelname configuration parameter is not properly sanitized, which could allow an authenticated...

CVE-2026-47117

OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used broad substring matching on the user-supplied modelname parameter, allowing a value such as attacker/foo-privacy-filter-bar to route through a path...

CVE-2026-47117: Improper Control of Generation of Code

OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used broad substring matching on the user-supplied modelname parameter, allowing a value such as attacker/foo-privacy-filter-bar to route through a path...

CVE-2026-9065 Surecart - SQL Injection

SureCart version prior to 4.2.1 are vulnerable to authenticated SQL injection via multiple parameters 'modelname', 'modelid', 'integrationid', 'provider' on the REST API endpoint '/surecart/v1/integrations/id'. The root cause is a flawed escaping bypass in the query builder 'wp-query-builder'...

CVE-2025-27787

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to denial of service DoS in restart.py. "modelname" in train.py takes user input, and passes it to the "stoptrain" function in restart.py, which uses it construct a path to a folder with "config.json". That...

CVE-2018-7233

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'modelname' or 'macaddress'...

CVE-2018-7233: Improper Input Validation

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'modelname' or 'macaddress'...