Skip to content
OpenAdvisories

Product · Microsoft

winml-cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-84452

    Windows ML CLI: CORS misconfig enables localhost RCE

    Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cli_api.py component exposes WinML CLI commands through a localhost HTTP API without authenticatio…

    Microsoft winml-cli winml-cli PyPI