VowpalWabbit

Products

ProductCVEsExploitedLatest
vowpal_wabbit1–May 26, 2026

Exploited and recent CVEs

  • CVE-2026-44723 Medium 5.0 Vowpal Wabbit: Shell injection via crafted PR title in python_checks.yml allows arbitrary command execution on CI runner 0.5%