Skip to content
8.5 High

CVE-2026-1260 Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created…

Description

Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.

Affected products and versions

Product Affected versions Fixed in
Sentencepiece Versions not published
Red Hat OpenShift AI 2.25 1772093324 earliest → < 1772093324 1772093324
Red Hat OpenShift AI 3.3 1771608633 earliest → < 1771608633 1771608633
Red Hat AI Inference Server Versions not published
Red Hat Enterprise Linux AI (RHEL AI) 3 Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published

References

Timeline

  1. Published
  2. Last modified
Track this CVE