Known Vulnerabilities for Red Hat AI Inference Server 3.5 by Red Hat
Listed below are 10 of the newest known vulnerabilities associated with "Red Hat AI Inference Server 3.5" by "Red Hat".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-112267 json | SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows ... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-105758 json | vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and Qwen... | Not Provided | 2026-10-05 | 2026-10-08 |
| CVE-2026-104433 json | Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/com... | Not Provided | 2026-10-03 | 2026-10-05 |
| CVE-2026-102503 json | Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-100650 json | vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the... | Not Provided | 2026-09-26 | 2026-10-01 |
| CVE-2026-73560 json | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the MiMoV2OmniMultiModalProcessor in vllm... | Not Provided | 2026-08-17 | 2026-08-18 |
| CVE-2026-66005 json | Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that allow... | Not Provided | 2026-07-24 | 2026-09-17 |
| CVE-2026-65105 json | NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the infe... | Not Provided | 2026-08-25 | 2026-08-26 |
| CVE-2026-61539 json | Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passe... | Not Provided | 2026-08-21 | 2026-08-24 |
| CVE-2026-47630 json | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A... | Not Provided | 2026-08-18 | 2026-08-20 |