https://vulnerability.circl.lu/sightings/feed 2026-08-26T15:29:53.749841+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c801957b-4c38-4dc9-8477-9213453a80b3/export 2026-08-26T15:29:53.773148+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c801957b-4c38-4dc9-8477-9213453a80b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mtyggcrlgh2e", "content": "\u300c\u30c4\u30fc\u30eb\u306e\u8fd4\u4e8b\u300d\u3092\u305d\u306e\u307e\u307e eval() \u306b\u901a\u3057\u3066\u308b\u3002Llama3\u306etool-call\u89e3\u6790\u3002CVSS 10\u3002\u672a\u8a8d\u8a3c\u3067\u30cd\u30c3\u30c8\u304b\u3089\u5c4a\u304f\u3002\ud83d\udc8e\nXinference\u3001CVE-2026-61539\u3002\u8f9e\u66f8\u306b\u5909\u63db\u3057\u305f\u304b\u3063\u305f\u3060\u3051\u2014\u2014\u3067\u3082 eval \u306f\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u3058\u3083\u306d\u3047\u3002\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-61539\n#Xinference #CVE #LLMSecurity", "creation_timestamp": "2026-08-26T13:21:25.358823Z"} 2026-08-26T13:21:25.358823+00:00 https://vulnerability.circl.lu/sighting/aa38e315-7660-409e-be3b-67f0b511d5a4/export 2026-08-26T15:29:53.776146+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "aa38e315-7660-409e-be3b-67f0b511d5a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61539", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtnlw5pjyx2w", "content": "CRITICAL RCE found in xorbitsai Xinference <=2.5.0 (CVE-2026-61539). Unauthenticated attackers can execute arbitrary code via eval injection. Upgrade to 2.7.0 now. https://radar.offseq.com/threat/cve-2026-61539-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-03188a...", "creation_timestamp": "2026-08-22T06:00:28.284028Z"} 2026-08-22T06:00:28.284028+00:00 https://vulnerability.circl.lu/sighting/9a526d8e-1561-48d5-922c-90bbc0685e67/export 2026-08-26T15:29:53.776501+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9a526d8e-1561-48d5-922c-90bbc0685e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61539", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117137632494320349", "content": "CVE-2026-61539: CRITICAL RCE in xorbitsai Xinference <=2.5.0 \u2014 attacker-controlled input reaches Python eval(), enabling unauthenticated code execution. Patch to 2.7.0. CVSS: 10.0 \ud83d\udee1\ufe0f https://radar.offseq.com/threat/cve-2026-61539-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-03188a31614e6f78 #OffSeq #CVE202661539 #infosec #remotecodeexecution", "creation_timestamp": "2026-08-22T06:00:26.286593Z"} 2026-08-22T06:00:26.286593+00:00 https://vulnerability.circl.lu/sighting/1e50062e-4c6c-4947-aea0-6a844f319701/export 2026-08-26T15:29:53.776767+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1e50062e-4c6c-4947-aea0-6a844f319701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://gist.github.com/alon710/81c41b230edf2bb67889e76531f6c94f", "content": "# CVE-2026-61539: CVE-2026-61539: Remote Code Execution via Llama3 Tool Parser Eval Injection in Xinference\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61539\n\n## Summary\nCVE-2026-61539 is a critical remote code execution vulnerability in Xinference, an inference API framework for open-source LLMs. In version 2.5.0 and earlier, model-generated outputs representing Llama3 tool calls are passed directly to Python's built-in eval() function inside the parser components. By manipulating conversational input or injecting instructions, an attacker can influence the LLM to output a Python expression containing malicious system commands, resulting in unauthenticated remote code execution on the host. This vulnerability has been resolved in Xinference version 2.7.0.\n\n## TL;DR\nUnsafe use of Python's eval() in Xinference's Llama3 tool parser enables unauthenticated remote code execution via prompt injection. Upgrading to version 2.7.0 mitigates this risk by replacing eval() with json.loads() and ast.literal_eval().\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-95\n- **Attack Vector**: Network\n- **CVSS Score**: 10.0\n- **Impact**: Arbitrary Code Execution\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- xorbitsai/inference (Xinference) API Service\n- **inference**: <= 2.5.0 (Fixed in: `2.7.0`)\n\n## Mitigation\n\n- Upgrade to Xinference v2.7.0 or higher\n- Implement network segmentation to protect the API port\n- Enforce API authentication using firewalls or API gateways\n- Run the application with an unprivileged system user\n\n**Remediation Steps:**\n1. Identify all active deployments of xorbitsai/inference.\n2. Verify the current version of the deployments using the API or environment checks.\n3. Update the deployment configurations to pull image version 2.7.0 or higher.\n4. Restart the services and verify that the /v1/chat/completions endpoint operates correctly.\n\n## References\n\n- [GitHub Security Advisory GHSA-x2rj-828p-hx9m](https://github.com/xorbitsai/inference/security/advisories/GHSA-x2rj-828p-hx9m)\n- [NVD CVE-2026-61539 Detail Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-61539)\n- [CVE Org Record CVE-2026-61539](https://www.cve.org/CVERecord?id=CVE-2026-61539)\n- [Xinference v2.7.0 Release Notes](https://github.com/xorbitsai/inference/releases/tag/v2.7.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61539) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T03:31:16.520468Z"} 2026-08-22T03:31:16.520468+00:00 https://vulnerability.circl.lu/sighting/07caa746-4f4a-4afc-9ac3-4ac21d93eae2/export 2026-08-26T15:29:53.776897+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "07caa746-4f4a-4afc-9ac3-4ac21d93eae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtn6ljbr3w2m", "content": "\ud83d\udd34 CVE-2026-61539 - Critical (10)\n\nXinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61539/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T02:01:53.058677Z"} 2026-08-22T02:01:53.058677+00:00 https://vulnerability.circl.lu/sighting/a46eec3a-b4df-4cab-8ef5-95ac76bac581/export 2026-08-26T15:29:53.777009+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a46eec3a-b4df-4cab-8ef5-95ac76bac581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmw42zhcu2u", "content": "CVE-2026-61539 - inference\nThe Xinference service processes chat requests and, in its default setup, runs a piece of code that can interpret text as a program. An attacker who can send specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#inference #xorbitsai #pip #CVE #infosec", "creation_timestamp": "2026-08-21T23:30:04.373603Z"} 2026-08-21T23:30:04.373603+00:00 https://vulnerability.circl.lu/sighting/a617230d-0b3f-4262-b3d8-81ff409c4d13/export 2026-08-26T15:29:53.777111+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a617230d-0b3f-4262-b3d8-81ff409c4d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtmriqo3j62t", "content": "\ud83d\udea8 CVE-2026-61539 \u2014 CVSS 10 CRITICAL\n\nXinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61539\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T22:07:40.558791Z"} 2026-08-21T22:07:40.558791+00:00