VULNERABILITY INTELLIGENCE

CVE-2026-6840

CVSS score5.5 MEDIUM
EPSS probability0.10%
CISA KEVNot currently listed
Published2026-04-22
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.

Weakness classification

  • CWE-129: Improper Validation of Array Index

Primary references