GHSA-x2rj-828p-hx9m: Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing
Summary
Xinference, an AI deployment tool, has a critical vulnerability where it uses Python's unsafe `eval()` function to parse tool-call output from Llama3 models. An attacker can craft prompts that trick the model into returning malicious Python code, which then gets executed on the server, allowing remote code execution (the ability to run arbitrary commands on a system you don't control) without needing authentication.
Vulnerability Details
EPSS: 0.0%
Yes
August 21, 2026
Classification
Taxonomy References
Affected Vendors
Affected Packages
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2024-37052: Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling
Original source: https://github.com/advisories/GHSA-x2rj-828p-hx9m
First tracked: August 21, 2026 at 08:00 PM
Classified by LLM (prompt v3) · confidence: 95%