kubeai vulnerabilities

1 known vulnerability in kubeai from Kubeai-project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  kubeai: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-34940Apr 6, 2026Kubeai-project

  KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components (ref, modelParam)