Skip to content
OpenAdvisories

Product · Hugging Face

text-generation-inference

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-63086

    text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completions

    text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compatible multimodal chat completions endpoint that allows unauthenticated network attackers to coerce the server into issuing arbitrary HTTP GE…

    Hugging Face text-generation-inference