RH
Product
Red Hat AI Inference Server
On CISA KEVExploited in the wild
40
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 25Medium 10Low 0
Watch
Add Red Hat AI Inference Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49121 | 9.8 | Jun 1 | AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization Affected: All versions, or not specified |
| CVE-2026-39892 | 9.8 | Apr 8 | cryptography has a buffer overflow if non-contiguous buffers were passed to APIs Affected: All versions, or not specified |
| CVE-2026-25960 | 9.8 | Mar 9 | SSRF Protection Bypass in vLLM Affected: All versions, or not specified |
| CVE-2026-5241 | 9.6 | Jun 3 | Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers Affected: All versions, or not specified |
| CVE-2026-48746 | 9.1 | Jun 22 | vLLM: OpenAI auth bypass Affected: All versions, or not specified |
Showing 5