Vulnerabilities of Red Hat Red Hat AI Inference Server

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-25048	xgrammar is an open-source library for efficient, flexible, and portable structured generation	8.7 High	Mar 5, 2026
CVE-2025-13327	Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials	6.3 Medium	Feb 27, 2026
CVE-2026-25990	Pillow is a Python imaging library	8.6 High	Feb 11, 2026
CVE-2025-69872	DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default	9.8 Critical	Feb 11, 2026
CVE-2026-22778	vLLM is an inference and serving engine for large language models (LLMs)	9.8 Critical	Feb 2, 2026
CVE-2026-24779	vLLM is an inference and serving engine for large language models (LLMs)	7.1 High	Jan 27, 2026
CVE-2026-24486	Python-Multipart is a streaming multipart parser for Python	8.6 High	Jan 27, 2026
CVE-2026-1260	Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created…	8.5 High	Jan 22, 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 High	Jan 22, 2026
CVE-2026-22807	vLLM is an inference and serving engine for large language models (LLMs)	8.8 High	Jan 21, 2026
CVE-2026-23490	pyasn1 is a generic ASN.1 library for Python	7.5 High	Jan 16, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2025-69223	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	7.5 High	Jan 5, 2026
CVE-2025-6242	A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's…	7.1 High	Oct 7, 2025
CVE-2025-6920	A flaw was found in the authentication enforcement mechanism of a model inference API in ai-inference-server	5.3 Medium	Jul 1, 2025

Other Red Hat products