https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 26 Aug 2026 15:29:52 +0000 https://vulnerability.circl.lu/sighting/c801957b-4c38-4dc9-8477-9213453a80b3/export {"uuid": "c801957b-4c38-4dc9-8477-9213453a80b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mtyggcrlgh2e", "content": "\u300c\u30c4\u30fc\u30eb\u306e\u8fd4\u4e8b\u300d\u3092\u305d\u306e\u307e\u307e eval() \u306b\u901a\u3057\u3066\u308b\u3002Llama3\u306etool-call\u89e3\u6790\u3002CVSS 10\u3002\u672a\u8a8d\u8a3c\u3067\u30cd\u30c3\u30c8\u304b\u3089\u5c4a\u304f\u3002\ud83d\udc8e\nXinference\u3001CVE-2026-61539\u3002\u8f9e\u66f8\u306b\u5909\u63db\u3057\u305f\u304b\u3063\u305f\u3060\u3051\u2014\u2014\u3067\u3082 eval \u306f\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u3058\u3083\u306d\u3047\u3002\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-61539\n#Xinference #CVE #LLMSecurity", "creation_timestamp": "2026-08-26T13:21:25.358823Z"} {"uuid": "c801957b-4c38-4dc9-8477-9213453a80b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mtyggcrlgh2e", "content": "\u300c\u30c4\u30fc\u30eb\u306e\u8fd4\u4e8b\u300d\u3092\u305d\u306e\u307e\u307e eval() \u306b\u901a\u3057\u3066\u308b\u3002Llama3\u306etool-call\u89e3\u6790\u3002CVSS 10\u3002\u672a\u8a8d\u8a3c\u3067\u30cd\u30c3\u30c8\u304b\u3089\u5c4a\u304f\u3002\ud83d\udc8e\nXinference\u3001CVE-2026-61539\u3002\u8f9e\u66f8\u306b\u5909\u63db\u3057\u305f\u304b\u3063\u305f\u3060\u3051\u2014\u2014\u3067\u3082 eval \u306f\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u3058\u3083\u306d\u3047\u3002\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-61539\n#Xinference #CVE #LLMSecurity", "creation_timestamp": "2026-08-26T13:21:25.358823Z"} https://vulnerability.circl.lu/sighting/c801957b-4c38-4dc9-8477-9213453a80b3/export Wed, 26 Aug 2026 13:21:25 +0000 https://vulnerability.circl.lu/sighting/aa38e315-7660-409e-be3b-67f0b511d5a4/export {"uuid": "aa38e315-7660-409e-be3b-67f0b511d5a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61539", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtnlw5pjyx2w", "content": "CRITICAL RCE found in xorbitsai Xinference <=2.5.0 (CVE-2026-61539). Unauthenticated attackers can execute arbitrary code via eval injection. Upgrade to 2.7.0 now. https://radar.offseq.com/threat/cve-2026-61539-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-03188a...", "creation_timestamp": "2026-08-22T06:00:28.284028Z"} {"uuid": "aa38e315-7660-409e-be3b-67f0b511d5a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61539", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtnlw5pjyx2w", "content": "CRITICAL RCE found in xorbitsai Xinference <=2.5.0 (CVE-2026-61539). Unauthenticated attackers can execute arbitrary code via eval injection. Upgrade to 2.7.0 now. https://radar.offseq.com/threat/cve-2026-61539-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-03188a...", "creation_timestamp": "2026-08-22T06:00:28.284028Z"} https://vulnerability.circl.lu/sighting/aa38e315-7660-409e-be3b-67f0b511d5a4/export Sat, 22 Aug 2026 06:00:28 +0000 https://vulnerability.circl.lu/sighting/9a526d8e-1561-48d5-922c-90bbc0685e67/export {"uuid": "9a526d8e-1561-48d5-922c-90bbc0685e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61539", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117137632494320349", "content": "CVE-2026-61539: CRITICAL RCE in xorbitsai Xinference <=2.5.0 \u2014 attacker-controlled input reaches Python eval(), enabling unauthenticated code execution. Patch to 2.7.0. CVSS: 10.0 \ud83d\udee1\ufe0f https://radar.offseq.com/threat/cve-2026-61539-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-03188a31614e6f78 #OffSeq #CVE202661539 #infosec #remotecodeexecution", "creation_timestamp": "2026-08-22T06:00:26.286593Z"} {"uuid": "9a526d8e-1561-48d5-922c-90bbc0685e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61539", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117137632494320349", "content": "CVE-2026-61539: CRITICAL RCE in xorbitsai Xinference <=2.5.0 \u2014 attacker-controlled input reaches Python eval(), enabling unauthenticated code execution. Patch to 2.7.0. CVSS: 10.0 \ud83d\udee1\ufe0f https://radar.offseq.com/threat/cve-2026-61539-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-03188a31614e6f78 #OffSeq #CVE202661539 #infosec #remotecodeexecution", "creation_timestamp": "2026-08-22T06:00:26.286593Z"} https://vulnerability.circl.lu/sighting/9a526d8e-1561-48d5-922c-90bbc0685e67/export Sat, 22 Aug 2026 06:00:26 +0000 https://vulnerability.circl.lu/sighting/1e50062e-4c6c-4947-aea0-6a844f319701/export {"uuid": "1e50062e-4c6c-4947-aea0-6a844f319701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://gist.github.com/alon710/81c41b230edf2bb67889e76531f6c94f", "content": "# CVE-2026-61539: CVE-2026-61539: Remote Code Execution via Llama3 Tool Parser Eval Injection in Xinference\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61539\n\n## Summary\nCVE-2026-61539 is a critical remote code execution vulnerability in Xinference, an inference API framework for open-source LLMs. In version 2.5.0 and earlier, model-generated outputs representing Llama3 tool calls are passed directly to Python's built-in eval() function inside the parser components. By manipulating conversational input or injecting instructions, an attacker can influence the LLM to output a Python expression containing malicious system commands, resulting in unauthenticated remote code execution on the host. This vulnerability has been resolved in Xinference version 2.7.0.\n\n## TL;DR\nUnsafe use of Python's eval() in Xinference's Llama3 tool parser enables unauthenticated remote code execution via prompt injection. Upgrading to version 2.7.0 mitigates this risk by replacing eval() with json.loads() and ast.literal_eval().\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-95\n- **Attack Vector**: Network\n- **CVSS Score**: 10.0\n- **Impact**: Arbitrary Code Execution\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- xorbitsai/inference (Xinference) API Service\n- **inference**: <= 2.5.0 (Fixed in: `2.7.0`)\n\n## Mitigation\n\n- Upgrade to Xinference v2.7.0 or higher\n- Implement network segmentation to protect the API port\n- Enforce API authentication using firewalls or API gateways\n- Run the application with an unprivileged system user\n\n**Remediation Steps:**\n1. Identify all active deployments of xorbitsai/inference.\n2. Verify the current version of the deployments using the API or environment checks.\n3. Update the deployment configurations to pull image version 2.7.0 or higher.\n4. Restart the services and verify that the /v1/chat/completions endpoint operates correctly.\n\n## References\n\n- [GitHub Security Advisory GHSA-x2rj-828p-hx9m](https://github.com/xorbitsai/inference/security/advisories/GHSA-x2rj-828p-hx9m)\n- [NVD CVE-2026-61539 Detail Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-61539)\n- [CVE Org Record CVE-2026-61539](https://www.cve.org/CVERecord?id=CVE-2026-61539)\n- [Xinference v2.7.0 Release Notes](https://github.com/xorbitsai/inference/releases/tag/v2.7.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61539) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T03:31:16.520468Z"} {"uuid": "1e50062e-4c6c-4947-aea0-6a844f319701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://gist.github.com/alon710/81c41b230edf2bb67889e76531f6c94f", "content": "# CVE-2026-61539: CVE-2026-61539: Remote Code Execution via Llama3 Tool Parser Eval Injection in Xinference\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61539\n\n## Summary\nCVE-2026-61539 is a critical remote code execution vulnerability in Xinference, an inference API framework for open-source LLMs. In version 2.5.0 and earlier, model-generated outputs representing Llama3 tool calls are passed directly to Python's built-in eval() function inside the parser components. By manipulating conversational input or injecting instructions, an attacker can influence the LLM to output a Python expression containing malicious system commands, resulting in unauthenticated remote code execution on the host. This vulnerability has been resolved in Xinference version 2.7.0.\n\n## TL;DR\nUnsafe use of Python's eval() in Xinference's Llama3 tool parser enables unauthenticated remote code execution via prompt injection. Upgrading to version 2.7.0 mitigates this risk by replacing eval() with json.loads() and ast.literal_eval().\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-95\n- **Attack Vector**: Network\n- **CVSS Score**: 10.0\n- **Impact**: Arbitrary Code Execution\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- xorbitsai/inference (Xinference) API Service\n- **inference**: <= 2.5.0 (Fixed in: `2.7.0`)\n\n## Mitigation\n\n- Upgrade to Xinference v2.7.0 or higher\n- Implement network segmentation to protect the API port\n- Enforce API authentication using firewalls or API gateways\n- Run the application with an unprivileged system user\n\n**Remediation Steps:**\n1. Identify all active deployments of xorbitsai/inference.\n2. Verify the current version of the deployments using the API or environment checks.\n3. Update the deployment configurations to pull image version 2.7.0 or higher.\n4. Restart the services and verify that the /v1/chat/completions endpoint operates correctly.\n\n## References\n\n- [GitHub Security Advisory GHSA-x2rj-828p-hx9m](https://github.com/xorbitsai/inference/security/advisories/GHSA-x2rj-828p-hx9m)\n- [NVD CVE-2026-61539 Detail Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-61539)\n- [CVE Org Record CVE-2026-61539](https://www.cve.org/CVERecord?id=CVE-2026-61539)\n- [Xinference v2.7.0 Release Notes](https://github.com/xorbitsai/inference/releases/tag/v2.7.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61539) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T03:31:16.520468Z"} https://vulnerability.circl.lu/sighting/1e50062e-4c6c-4947-aea0-6a844f319701/export Sat, 22 Aug 2026 03:31:16 +0000 https://vulnerability.circl.lu/sighting/07caa746-4f4a-4afc-9ac3-4ac21d93eae2/export {"uuid": "07caa746-4f4a-4afc-9ac3-4ac21d93eae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtn6ljbr3w2m", "content": "\ud83d\udd34 CVE-2026-61539 - Critical (10)\n\nXinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61539/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T02:01:53.058677Z"} {"uuid": "07caa746-4f4a-4afc-9ac3-4ac21d93eae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtn6ljbr3w2m", "content": "\ud83d\udd34 CVE-2026-61539 - Critical (10)\n\nXinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61539/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T02:01:53.058677Z"} https://vulnerability.circl.lu/sighting/07caa746-4f4a-4afc-9ac3-4ac21d93eae2/export Sat, 22 Aug 2026 02:01:53 +0000 https://vulnerability.circl.lu/sighting/a46eec3a-b4df-4cab-8ef5-95ac76bac581/export {"uuid": "a46eec3a-b4df-4cab-8ef5-95ac76bac581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmw42zhcu2u", "content": "CVE-2026-61539 - inference\nThe Xinference service processes chat requests and, in its default setup, runs a piece of code that can interpret text as a program. An attacker who can send specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#inference #xorbitsai #pip #CVE #infosec", "creation_timestamp": "2026-08-21T23:30:04.373603Z"} {"uuid": "a46eec3a-b4df-4cab-8ef5-95ac76bac581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmw42zhcu2u", "content": "CVE-2026-61539 - inference\nThe Xinference service processes chat requests and, in its default setup, runs a piece of code that can interpret text as a program. An attacker who can send specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#inference #xorbitsai #pip #CVE #infosec", "creation_timestamp": "2026-08-21T23:30:04.373603Z"} https://vulnerability.circl.lu/sighting/a46eec3a-b4df-4cab-8ef5-95ac76bac581/export Fri, 21 Aug 2026 23:30:04 +0000 https://vulnerability.circl.lu/sighting/a617230d-0b3f-4262-b3d8-81ff409c4d13/export {"uuid": "a617230d-0b3f-4262-b3d8-81ff409c4d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtmriqo3j62t", "content": "\ud83d\udea8 CVE-2026-61539 \u2014 CVSS 10 CRITICAL\n\nXinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61539\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T22:07:40.558791Z"} {"uuid": "a617230d-0b3f-4262-b3d8-81ff409c4d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61539", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtmriqo3j62t", "content": "\ud83d\udea8 CVE-2026-61539 \u2014 CVSS 10 CRITICAL\n\nXinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61539\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T22:07:40.558791Z"} https://vulnerability.circl.lu/sighting/a617230d-0b3f-4262-b3d8-81ff409c4d13/export Fri, 21 Aug 2026 22:07:40 +0000