Skip to content
OpenAdvisories

Product · Docker

model-runner

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-28400

    Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint

    Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker. Versions prior to 1.0.16 expose a POST `/engines/_configure` endpoint that accepts arbitrary runtime flags without authentication. These flags are passed directly to…

    Docker model-runner