What’s Vulnerable › Products
Red Hat AI Inference Server vulnerabilities
11 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your Red Hat AI Inference Server version is affected
Exploited Red Hat AI Inference Server vulnerabilities
- CVE-2026-48710 — Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Latest Red Hat AI Inference Server vulnerabilities
- CVE-2026-56211 — Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames (CVSS 7.1)
- CVE-2026-56210 — Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id (CVSS 7.1)
- CVE-2026-56209 — Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack (CVSS 7.1)
- CVE-2026-56208 — Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode (CVSS 7.6)
- CVE-2026-12491 — Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations (CVSS 4.8)
- CVE-2026-48710 — Kludex Starlette HTTP Request/Response Smuggling Vulnerability (CVSS 6.5) — exploited
- CVE-2026-6385 — Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser (CVSS 6.5)
- CVE-2026-39979 — jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers (CVSS 6.5)
- CVE-2026-4775 — Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing (CVSS 7.8)
- CVE-2025-6242 — Vllm: server side request forgery (ssrf) in mediaconnector (CVSS 7.1)
- CVE-2025-6920 — Ai-inference-server: authentication bypass via unprotected inference endpoint in api (CVSS 5.3)
- CVE-2023-52356 — Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service (CVSS 7.5)