CyberSecBulletin

Modular vulnerabilities

We track 1 vulnerability in Modular products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 18, 2025.

1vulnerabilities
0critical
1high
0exploited
8.4average CVSS score

Latest Modular vulnerabilities

  • 8.4 High severity

    Max: Deserialization of Untrusted Data

    CVE-2025-60455Modular

    Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when the "--experimental-enable-kvcache-agent" feature is used allowing attackers to execute arbitrary code.