CVE-2026-0599: A vulnerability in huggingface/text-generation-inference version 3.3.6 allows unauthenticated remote attackers to…

Summary

CVE-2026-0599 affects huggingface/text-generation-inference version 3.3.6. Unauthenticated remote attackers can trigger unbounded external image fetching during input validation in VLM mode, because the router performs a blocking HTTP GET on Markdown image links and reads the entire response into memory. This can exhaust network bandwidth, memory and CPU, and the default deployment, which lacks memory limits and authentication, could crash the host machine.

Mitigation

The issue is resolved in version 3.3.7.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• text-generationPyPILLM dependency since 2023-03-07

Topics

• Inference infrastructure

Related items

• HighCVE-2026-119120: Crawl4AI Docker API lets clients choose the HuggingFace model it loadsSame vendor · NVD/CVE Database
• HighGHSA-wf6j-7hvr-gr93: Hydra legacy target blacklist permits unsafe PyYAML loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-100653: vLLM unpinned Hugging Face artifact loads for FunAudioChat and Tarsier2Same vendor · NVD/CVE Database
• HighGHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-80047: Hugging Face Transformers writes remote Python files to disk before trust checkSame vendor · NVD/CVE Database