CVE-2026-112051 xorbitsai CVE debrief

Who should care

Defenders responsible for Xinference installations, particularly those running version 4.0.1 or earlier on Windows, should assess exposure and implement security measures to prevent exploitation.

Why it matters

CVE-2026-112051 is a high-severity path traversal vulnerability in Xinference that allows unauthenticated attackers to write and delete arbitrary .json files. Defenders should prioritize patching or mitigating this vulnerability to prevent potential data loss, configuration modifications, and service disruptions.

• Potential data loss or corruption due to arbitrary file write and delete operations.
• Possible configuration file modifications leading to service disruption or unauthorized access.
• Risk of elevated privileges or lateral movement through exploitation of this vulnerability.

Technical summary

The CVE record describes a path traversal vulnerability in Xinference through 4.0.1 on Windows. The vulnerability allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model_name. Attackers can register a persisted custom model through POST /v1/model_registrations/{model_type} with names like ....evil to overwrite configuration or data files writable by the Xinference process.

Defensive priority

High

Recommended defensive actions

• Review and update Xinference installations to ensure they are running a version that addresses this vulnerability.
• Implement additional security measures to monitor and restrict write and delete operations on .json files.
• Verify the integrity of configuration and data files writable by the Xinference process.
• Conduct a thorough review of system logs to detect any potential exploitation attempts.
• Perform a vulnerability scan to identify any other potential vulnerabilities in the environment.
• Develop and implement a patch management process to ensure timely application of security patches.
• Engage with the Xinference community or vendor for support and guidance on addressing this vulnerability.

Evidence notes

The CVE record and NVD entry provide details on the path traversal vulnerability in Xinference through 4.0.1. The vulnerability allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model_name.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.