Advisories · Technology
xorbitsai inference.
Every CVE that names xorbitsai inference among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.3 High
Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration
- xorbitsai inference
- Path traversal
- CVSS 8.7 High
Xinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-register
- xorbitsai inference
- Path traversal
- CVSS 8.7 High
Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders
- xorbitsai inference
- Code injection