RHSA-2026:83116HighCVSS 8.8

Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.6 (cuda)

Published
October 14, 2026
Last Modified
November 1, 2026

🔗 CVE IDs covered (6)

CVE-2026-69112 →CVE-2026-97687 →CVE-2026-97688 →CVE-2026-97689 →CVE-2026-104851 →CVE-2026-104874 →

📋 Description

CVE-2026-69112 — accelerate: Hugging Face Accelerate: Path Traversal and Denial of Service via weight_map CVE-2026-97687 — urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override CVE-2026-97688 — urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding CVE-2026-97689 — urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-104851 — fsspec: fsspec: arbitrary code execution via unrestricted template rendering in ReferenceFileSystem CVE-2026-104874 — multidict: multidict: Denial of Service via memory leak in items-view operations

🎯 Affected products3

  • Red Hat AI Inference Server 3.4
  • registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:94288e1ccdd9da501a024fdf59eedad7717722dd14607cf0e30affd521a01db1_amd64 as a component of Red Hat AI Inference Server 3.4
  • registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:b10a24a785868adf23de8329e6c0a82f03b58707ea652d3403cd36154e161859_arm64 as a component of Red Hat AI Inference Server 3.4

✅ Remediation

For more information visit https://access.redhat.com/errata/RHSA-2026:83116 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (10)