CVE-2025-51427

Fixed upstream EPSS <1%CVSS 7.3

An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration file (dey_mini.yaml) under the key ['nnet']['module'].

Published 2026-05-19 · CVE record · OSV

Products: Red Hat OpenShift AI (RHOAI)

Fixed upstream