CVE-2026-1260
Fixed in a distro release EPSS <1%CVSS 8.5
Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.
Products: Google Sentencepiece, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.3, Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI)
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | sentencepiece | 0.2.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | py3.11-text-generation-inference | 3.3.7-r6 |