CVE-2026-125087
Deferred Deferred - Pending Action

Authentication Bypass in Shimmy Inference API

Publication date: 2026-11-10

Last updated on: 2026-11-10

Assigner: VulDB

Description
A vulnerability was found in Michael-A-Kuykendall Shimmy up to 2.6.4. The affected element is an unknown function of the file src/server.rs of the component Inference API. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. Upgrading to version 2.6.5 is sufficient to fix this issue. The patch is named 3f2ee748c02eeb229987913fe289a2ed9a24595d. You should upgrade the affected component.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-10
Last Modified
2026-11-10
Generated
2026-11-10
AI Q&A
2026-11-10
EPSS Evaluated
N/A
NVD
CVE-2026-125087
EUVD
EUVD-2026-120704

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
michael-a-kuykendall shimmy to 2.6.5 (exc)
michael-a-kuykendall shimmy 2.6.6
michael-a-kuykendall shimmy to 2.6.4 (inc)
michael-a-kuykendall shimmy 2.6.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-125087 is a missing authentication vulnerability in the Shimmy project's Inference API. The HTTP server exposes all routes, including OpenAI-compatible endpoints, without requiring any authentication. This allows remote attackers to access the API without credentials, enabling unauthorized model enumeration, inference requests, and potential resource exhaustion. The issue is classified as CWE-306 (Missing Authentication for Critical Function).

Detection Guidance

Check if the Shimmy server is binding to 0.0.0.0 or a public IP without authentication. Use commands like 'curl -v http://<server-ip>:<port>/v1/models' to test for unauthenticated access. Inspect Docker/Kubernetes configurations for exposed LoadBalancer services or permissive network policies.

Impact Analysis

This vulnerability allows unauthenticated users to submit arbitrary inference requests, causing resource exhaustion on the server. It also enables enumeration of available models and potential triggering of requests from third-party webpages due to permissive CORS policies. The exposed API could be used to consume server resources or interact with models without permission.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and access control, such as GDPR's principle of least privilege and HIPAA's access control safeguards. Unauthorized access to inference endpoints could lead to unauthorized data processing or exposure, creating legal and regulatory risks.

Mitigation Strategies

Upgrade Shimmy to version 2.6.5 or later. Configure API keys for non-loopback binds, restrict Docker host ports to loopback, and use ClusterIP services in Kubernetes. Disable wildcard CORS and set explicit allowed origins via SHIMMY_ALLOWED_ORIGINS.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-125087. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...