CVE-2026-33990

The Docker Model Runner (DMR) , used to manage and deploy AI models, is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 1.1.25 . The root cause is a lack of validation on the scheme, hostname, or IP range of the realm URL provided in an OCI registry's WWW-Authenticate header...