CVE-2025-60455

Modular Max Serve versions prior to 25.6 are susceptible to an Unsafe Deserialization vulnerability. This flaw is specifically triggered when the --experimental-enable-kvcache-agent feature is enabled. If exploited, an attacker could achieve arbitrary code execution . While specific exploit links...