Kubeai-project vulnerabilities
We track 1 vulnerability in Kubeai-project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 6, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Kubeai-project vulnerabilities
- 8.8 High severity
kubeai: Improper Neutralization of Special Elements used in an OS Command
KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components (ref, modelParam)