CVE-2026-85668
Last modified
CVE-2026-85668 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint, which accepts a caller-supplied model_path parameter without authentication or path confinement. The endpoint reads and parses config.json, tokenizer_config.json, and chat_template.jinja files at the supplied path and reflects the parsed content back to the caller, allowing an unauthenticated attacker to probe the server filesystem and extract content of files with those names in any directory..
Description
Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint, which accepts a caller-supplied model_path parameter without authentication or path confinement. The endpoint reads and parses config.json, tokenizer_config.json, and chat_template.jinja files at the supplied path and reflects the parsed content back to the caller, allowing an unauthenticated attacker to probe the server filesystem and extract content of files with those names in any directory.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| xorbitsai | inference | <= 3.3.0 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-85668?
How severe is CVE-2026-85668?
How do I fix CVE-2026-85668?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-85662Marqo 2.26.0 contains a server-side request forgery vulnerab…5.3
- CVE-2026-85663Aim 3.29.1 remote tracking server fails to authenticate requ…9.8
- CVE-2026-85664Chroma 1.5.9 fails to validate maximum bounds on HNSW index …7.5
- CVE-2026-85665Bruno versions through 4.1.0 fail to validate file paths in …6.5
- CVE-2026-85666OGX (formerly Llama Stack, affected at commit fbe8e0f) conta…7.5
- CVE-2026-85667xiaobei through 5.5.2 fails to implement authentication or s…9.1
- CVE-2026-85669potpie through 2.0.0 fails to verify user ownership on the P…6.5
- CVE-2026-8567Integer overflow in ANGLE in Google Chrome on Windows prior …4.3
- CVE-2026-85670tokenizers (Hugging Face) is affected by an out-of-bounds bu…6.5
- CVE-2026-85671QAnything 2.0.0 contains an authentication bypass vulnerabil…7.5
- CVE-2026-85672zerox 1.1.20 contains an OS command injection vulnerability …9.8
- CVE-2026-85673LLaMA-Factory contains a server-side request forgery vulnera…7.5
Are you affected by CVE-2026-85668?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST