CVE-2025-60455

The Modular Max Serve software (specifically the modular AI library) is vulnerable to an Unsafe Deserialization vulnerability (CWE-502) in versions prior to 25.6 . The issue exists when the "--experimental-enable-kvcache-agent" feature is explicitly enabled, allowing an attacker to supply crafted...