CVE-2026-112051
Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitr
CVSS
6.5
Medio
EPSS
0.4%
p29
KEV
—
Exploit Today
9
0-100
Publicado: 18 oct 2026 · Última mod.: 19 oct 2026 · CWE-22
0.4%EPSS · 30 días0.4%
2026-10-192026-10-20
Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model_name. Attackers can register a persisted custom model through POST /v1/model_registrations/{model_type} with names like ..\..\evil to overwrite configuration or data files writable by the Xinference process.
- github.comhttps://github.com/xorbitsai/inference/blob/v4.0.1/xinference/model/cache_manager.py#L117-L134
- github.comhttps://github.com/xorbitsai/inference/blob/v4.0.1/xinference/model/utils.py#L1175-L1182
- github.comhttps://github.com/xorbitsai/inference/commit/beddc97ac211f8414597fe8479493be0603f7c84
- github.comhttps://github.com/xorbitsai/inference/issues/5702
- www.vulncheck.comhttps://www.vulncheck.com/advisories/xinference-through-4.0.1-path-traversal-via-model-name-in-custom-model-registration
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1140403.5 BAJ—
——0A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get_model_meta of the file berrynet/dlmodelmgr.py of the component Model Package Metadata Handler. The manipulation of the argument label leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.14hCVE-2026-1137436.3 MED—
——0A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_checkpoints.py. This manipulation of the argument weight_map causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.81.0-dev20261016 is sufficient to fix this issue. Patch name: 4851ccf347f6903c3d819eed60705600386e52c3. It is suggested to upgrade the affected component.16hCVE-2026-1141098.8 ALT—
——0uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted console_scripts or gui_scripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories, shadowing or overwriting existing binaries for code execution.17hCVE-2026-1141067.5 ALT—
——0HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attackers to read sensitive server files through LLM agent file-read tools. Attackers can prompt the agent to invoke read_document, which lacks sandbox checks, or safe_user_path-gated tools to leak /etc/shadow, /proc/self/environ API keys, and /root credentials.17hCVE-2026-1140987.8 ALT—
——0Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that allows attackers to write arbitrary files outside the worktree through intermediate directory symlinks. Attackers can craft a malicious repository whose popped stash writes a payload into .git/hooks/post-checkout, achieving code execution on the next checkout.17hCVE-2026-1140977.8 ALT—
——0Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._apply_index_filter() that allows attackers to write files outside the working directory via symlinks persisting between commits. Attackers can craft a repository where an ancestor commit's symlink redirects a descendant commit's file writes during filter_branch, enabling code execution by writing into .git/hooks.17h