Red Hat Red Hat AI Inference Server

• CVE-2026-18621 High 7.6 Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening 0.5%
• CVE-2026-56211 High 7.1 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames 0.9%
• CVE-2026-56210 High 7.1 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id 0.6%
• CVE-2026-56209 High 7.1 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack 0.6%
• CVE-2026-12491 Medium 4.8 Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations 0.2%
• CVE-2026-6385 Medium 6.5 Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser 0.4%
• CVE-2025-13327 Medium 6.3 Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials 0.2%
• CVE-2025-6242 High 7.1 Vllm: server side request forgery (ssrf) in mediaconnector 0.3%
• CVE-2025-6920 Medium 5.3 Ai-inference-server: authentication bypass via unprotected inference endpoint in api 0.3%