Description
An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) component
Critical · 9.8
CVE-2025-57622
EUVD-2025-208231GHSA-3m48-x3q6-rhjc
An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(requ…
Published Mar 3, 2026 · Updated Mar 12, 2026 · Assigned by mitre