CVE-2026-10800

A weakness has been identified in PaddlePaddle FastDeploy up to 2.4.1. Affected by this issue is the function hash_features of the file fastdeploy/multimodal/hasher.py of the component MultimodalHasher. Executing a manipulation can lead to use of weak hash. The attack requires local access. A high complexity level is associated with this attack. The exploitation is known to be difficult. This patch is called 374945747652a8d32965591c0c01a00c88b7067f. Applying a patch is advised to resolve this issue.

• CWE-327
• CWE-328

• https://github.com/PaddlePaddle/FastDeploy/
• https://github.com/PaddlePaddle/FastDeploy/commit/374945747652a8d32965591c0c01a00c88b7067f
• https://github.com/PaddlePaddle/FastDeploy/issues/7196
• https://github.com/PaddlePaddle/FastDeploy/pull/7185
• https://vuldb.com/cve/CVE-2026-10800
• https://vuldb.com/submit/831452
• https://vuldb.com/vuln/368249
• https://vuldb.com/vuln/368249/cti

Published

Jun 4, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10787Missing authorization in the deleted user groups API in Devo…4.3
• CVE-2026-10789A maliciously crafted webpage, when visited by a user with A…9.6
• CVE-2026-1079A native messaging host vulnerability in Pega Browser Extens…6
• CVE-2026-10795The UpdraftPlus: WP Backup & Migration Plugin plugin for Wor…8.1
• CVE-2026-10796nvm (Node Version Manager) through 0.40.4 executes arbitrary…7.5
• CVE-2026-1080GitLab has remediated an issue in GitLab EE affecting all ve…4.3
• CVE-2026-10801A security vulnerability has been detected in modelscope ms-…3.6
• CVE-2026-10802A vulnerability was detected in keystonejs keystone up to 20…4.3
• CVE-2026-10803A flaw has been found in MLflow up to 3.10.0. This issue aff…3.6
• CVE-2026-10804A vulnerability has been found in Streamlit up to 1.53.0. Im…4.7
• CVE-2026-10805A flaw was found in NetworkManager. This local privilege esc…6.7
• CVE-2026-10806A vulnerability was found in mjperpinosa stumasy. The affect…6.3