{"data":{"id":"deb69f2d-5c9d-4e97-898e-11de8fd46a69","title":"GHSA-x2rj-828p-hx9m: Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing","summary":"Xinference, an AI deployment tool, has a critical vulnerability where it uses Python's unsafe `eval()` function to parse tool-call output from Llama3 models. An attacker can craft prompts that trick the model into returning malicious Python code, which then gets executed on the server, allowing remote code execution (the ability to run arbitrary commands on a system you don't control) without needing authentication.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-x2rj-828p-hx9m","publishedAt":"2026-08-21T20:56:37.000Z","cveId":"CVE-2026-61539","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":["xinference@<= 2.5.0 (fixed: 2.7.0)"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["Xinference","Llama3","Transformers"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-08-21T20:56:37.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"]}}