Beijing Academy of Artificial Intelligence (BAAI) vulnerabilities
We track 1 vulnerability in Beijing Academy of Artificial Intelligence (BAAI) products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 18, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Beijing Academy of Artificial Intelligence (BAAI) vulnerabilities
- 9.8 Critical severity
OmniGen2-RL: Deserialization of Untrusted Data
OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows remote attackers to execute arbitrary commands by sending malicious HTTP POST requests. Attackers can exploit insecure pickle deserialization