VDB
RHSA-2026:83114
RHSA-2026:83114
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in Hugging Face PyTorch Image Models. A remote attacker could exploit a deserialization of untrusted data vulnerability by enticing a user to visit a malicious page or open a malicious file. This could lead to arbitrary code execution in the context of the current process. The flaw exists due to insufficient validation of user-supplied data during the parsing of checkpoints.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:e4c4daa59819b6a5ac649a09f162e266b8690481f7487860cf39e897fe042a65_amd64 as a component of Red Hat AI Inference Server 3.4 | * |
| Red Hat | registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:c0e94a509b36a872b8b80a1578393f164a502d0d564ed696dd6a09001348b72d_ppc64le as a component of Red Hat AI Inference Server 3.4 | * |
| Red Hat | registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:f6dab534a71c3e8dca9b95e774a9ac49e79415d01ed66a021eaed5f9ed63c428_s390x as a component of Red Hat AI Inference Server 3.4 | * |
Timeline
- Oct 14, 2026 CVE Published
- Oct 27, 2026 CVE Updated
- Oct 27, 2026 Distribution Patch
- Oct 27, 2026 Distribution Patch
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
References
- https://www.cve.org/CVERecord?id=CVE-2026-97688 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-97688 advisory
- https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f advisory
- https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2543245 issue
- https://www.cve.org/CVERecord?id=CVE-2026-97689 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-97689 advisory
- https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed advisory
- https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2541909 issue
- https://www.cve.org/CVERecord?id=CVE-2026-100650 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-100650 advisory
- https://github.com/vllm-project/vllm/commit/752a3a504485790a2e8491cacbb35c137339ad34 advisory
- https://github.com/vllm-project/vllm/security/advisories/GHSA-p6g9-7v3x-m8mv advisory
- https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2545294 issue
- https://www.cve.org/CVERecord?id=CVE-2026-104851 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-104851 advisory
- https://github.com/fsspec/filesystem_spec/commit/86438783f93b1398ef245b92f0e6063b445b611c advisory
- https://github.com/fsspec/filesystem_spec/commit/a1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8 advisory
…and 70 more