Xorbitsai vulnerabilities
We track 4 vulnerabilities in Xorbitsai products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2026.
Latest Xorbitsai vulnerabilities
- 9.8 Critical severity
xoscar: Deserialization of Untrusted Data
Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidat
- 7.5 High severity
inference: External Control of File Name or Path
Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint, which accepts a caller-supplied model_path parameter without authentication or path confinement. Th
- 8.8 High severity
inference: Improper Control of Generation of Code
Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trust_remote_code=True as a literal or as an unconditional default: RerankModel._get
- 10.0 Critical severity
inference: Improper Neutralization of Directives in Dynamically Evaluated Code
Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eval() in xinference/model/llm/tool_parsers/llama3_tool_parser.py and xinference/model