CVE-2026-33625
8.8 · High
Code execution in LMDeploy through eval() of a model’s quant_dtype
A crafted quantization_config in a Hugging Face model made LMDeploy pass quant_dtype to eval(), so loading the model ran the attacker’s Python code.
Vulnerability class
Code execution
Vulnerabilities that end in arbitrary code execution on the server, the pod or the user’s workstation.
6 write-ups, 7 vulnerabilities
CVE-2026-34398, CVE-2026-34399
7.8 · High
Code execution through eval() in the FreeCAD BIM workbench
Two eval() calls in the FreeCAD BIM workbench ran Python read from project and drawing templates, so loading a crafted template executed attacker code.
GHSA-wg9g-w2j2-8pgr
7.8 · High
Code execution in MONAI through pickled NumPy files read by NumpyReader
MONAI’s NumpyReader loaded .npy and .npz files with allow_pickle=True, so a poisoned file in a medical imaging dataset ran code on load.
CVE-2026-48017
8.8 · High
Remote code execution in DbGate through the loadReader endpoint
Any authenticated DbGate user could inject JavaScript into a script the server forks, then escape the require = null sandbox with process.binding.
CVE-2026-45662
8.8 · High
Command injection in Dokploy through the registry URL on docker logout
Dokploy escaped the registry URL for docker login but not for docker logout, so deleting a crafted registry ran shell commands on the host.
CVE-2026-34940
8.7 · High
OS command injection in KubeAI through the Ollama startup probe
A user allowed to create KubeAI Model resources could run shell commands inside model pods by adding metacharacters to the model URL.
Vulnerabilities
| Identifier | Product | Vulnerability | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-33625 | LMDeploy | eval() of quant_dtype from the model quantization_config | 8.8 High | |
| CVE-2026-34398 | FreeCAD | eval() on .FCStd metadata in the BIM Project Manager | 7.8 High | |
| CVE-2026-34399 | FreeCAD | eval() on the SVG template Scale field in the BIM TechDraw page | 7.8 High | |
| GHSA-wg9g-w2j2-8pgr | MONAI | Unsafe deserialisation in NumpyReader | 7.8 High | |
| CVE-2026-48017 | DbGate | Code injection in loadReader through functionName | 8.8 High | |
| CVE-2026-45662 | Dokploy | Command injection through registryUrl in docker logout | 8.8 High | |
| CVE-2026-34940 | KubeAI | Command injection through the Model URL in the Ollama startup probe | 8.7 High |