Skip to content
OpenAdvisories

Product · Hugging Face

Text Embeddings Inference

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2026-108857

    Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging

    Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configured api_key because the router's Args struct lacks a redact attribute for it. Attackers with access to router logs, container output, or OT…

    Hugging Face Text Embeddings Inference