What’s Vulnerable › Products

xorbitsai inference vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your xorbitsai inference version is affected

Latest xorbitsai inference vulnerabilities

• CVE-2026-112051 — Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration (CVSS 6.5)
• CVE-2026-85668 — Xinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-register (CVSS 7.5)
• CVE-2026-76841 — Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders (CVSS 8.8)
• CVE-2026-61539 — Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing (CVSS 10.0)