CVE-2026-15535

A vulnerability was determined in AkariAsai self-rag up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99. Affected by this issue is the function Indexer.deserialize_from of the file retrieval_lm/src/index.py of the component retrieval_lm. Executing a manipulation of the argument index_meta.faiss can lead to deserialization. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-20
• CWE-502

• https://github.com/AkariAsai/self-rag/
• https://github.com/AkariAsai/self-rag/issues/105
• https://github.com/AkariAsai/self-rag/pull/106
• https://vuldb.com/cve/CVE-2026-15535
• https://vuldb.com/submit/854999
• https://vuldb.com/vuln/377885
• https://vuldb.com/vuln/377885/cti

Published

Jul 13, 2026

Last Modified

Jul 13, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1553Incorrect Authorization vulnerability in Drupal Drupal Canva…4.8
• CVE-2026-15530A flaw has been found in WuzhiCMS up to 4.1.0. Affected by t…5.5
• CVE-2026-15531A vulnerability has been found in yashbhalgat HashNeRF-pytor…5.3
• CVE-2026-15532A vulnerability was identified in SourceCodester Online Book…2.4
• CVE-2026-15533A security flaw has been discovered in DedeCMS 5.7.118. Impa…4.7
• CVE-2026-15534Perl versions through 5.45.1 have out-of-bounds heap reads a…
• CVE-2026-15536A vulnerability was identified in itsourcecode Hospital Mana…6.3
• CVE-2026-15537A security flaw has been discovered in SourceCodester Online…7.3
• CVE-2026-15538A weakness has been identified in primefaces primereact up t…6.3
• CVE-2026-15539A security vulnerability has been detected in SourceCodester…4.7
• CVE-2026-1554XML Injection (aka Blind XPath Injection) vulnerability in D…4.2
• CVE-2026-15540A vulnerability was detected in SourceCodester Online Book S…4.3