Vulnerabilities of Red Hat Red Hat AI Inference Server 3.2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-34755	vLLM is an inference and serving engine for large language models (LLMs)	6.5 Medium	Apr 6, 2026
CVE-2026-34982	Vim is an open source, command line text editor	8.2 High	Apr 6, 2026
CVE-2026-35385	In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'…	7.5 High	Apr 2, 2026
CVE-2026-5201	Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image	7.5 High	Mar 31, 2026
CVE-2026-5121	Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing	7.5 High	Mar 30, 2026
CVE-2026-27893	vLLM is an inference and serving engine for large language models (LLMs)	8.8 High	Mar 26, 2026
CVE-2026-33412	Vim is an open source, command line text editor	5.6 Medium	Mar 24, 2026
CVE-2026-4775	Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing	7.8 High	Mar 24, 2026
CVE-2026-4519	The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for…	7.0 High	Mar 20, 2026
CVE-2026-4424	Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing	7.5 High	Mar 19, 2026
CVE-2026-27135	nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C	7.5 High	Mar 18, 2026
CVE-2026-26740	Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the…	8.2 High	Mar 18, 2026
CVE-2026-32981	A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1	8.7 High	Mar 17, 2026
CVE-2026-4111	Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive	7.5 High	Mar 13, 2026
CVE-2026-3497	Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions	2.7 Low	Mar 12, 2026
CVE-2026-28356	multipart is a fast multipart/form-data parser for python	7.5 High	Mar 12, 2026
CVE-2026-23868	Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect…	5.1 Medium	Mar 10, 2026
CVE-2026-25048	xgrammar is an open-source library for efficient, flexible, and portable structured generation	8.7 High	Mar 5, 2026
CVE-2026-25990	Pillow is a Python imaging library	8.6 High	Feb 11, 2026
CVE-2025-14831	Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification	5.3 Medium	Feb 9, 2026
CVE-2026-22778	vLLM is an inference and serving engine for large language models (LLMs)	9.8 Critical	Feb 2, 2026
CVE-2026-24779	vLLM is an inference and serving engine for large language models (LLMs)	7.1 High	Jan 27, 2026
CVE-2025-15467	Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…	Not rated	Jan 27, 2026
CVE-2026-24486	Python-Multipart is a streaming multipart parser for Python	8.6 High	Jan 27, 2026
CVE-2026-0994	A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the…	8.2 High	Jan 23, 2026

Other Red Hat products