{"uuid": "9a526d8e-1561-48d5-922c-90bbc0685e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61539", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117137632494320349", "content": "CVE-2026-61539: CRITICAL RCE in xorbitsai Xinference <=2.5.0 \u2014 attacker-controlled input reaches Python eval(), enabling unauthenticated code execution. Patch to 2.7.0. CVSS: 10.0 \ud83d\udee1\ufe0f https://radar.offseq.com/threat/cve-2026-61539-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-03188a31614e6f78 #OffSeq #CVE202661539 #infosec #remotecodeexecution", "creation_timestamp": "2026-08-22T06:00:26.286593Z"}