CVE-2026-112051
Received Received - Intake

Xinference Path Traversal Vulnerability on Windows

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: VulnCheck

Description
Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model_name. Attackers can register a persisted custom model through POST /v1/model_registrations/{model_type} with names like ..\..\evil to overwrite configuration or data files writable by the Xinference process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-112051
EUVD
EUVD-2026-103513

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
xorbitsai inference 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-112051 is a path traversal vulnerability in Xinference through version 4.0.1 affecting Windows systems. It allows unauthenticated attackers to write or delete arbitrary .json files by exploiting backslash sequences in model names during custom model registration. Attackers can use sequences like ..\..\evil to escape the intended model directory and target files writable by the Xinference process.

Detection Guidance

Check if Xinference is running on Windows by inspecting running processes or services. Monitor network traffic for POST requests to /v1/model_registrations/{model_type} with model names containing backslashes or path traversal sequences like ..\..\. Use file integrity monitoring to detect unauthorized .json file modifications in directories accessible by Xinference.

Impact Analysis

This vulnerability could allow attackers to overwrite or delete configuration and data files, or plant malicious files for later use. It may lead to unauthorized access, data loss, or system compromise if the Xinference process has write permissions to sensitive directories.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by allowing unauthorized file writes or deletions. Attackers could overwrite configuration files, data files, or plant malicious files, potentially exposing or altering sensitive personal or health data. GDPR requires protection of personal data integrity and confidentiality, while HIPAA mandates safeguards for protected health information. The path traversal flaw enables violations of these requirements by compromising file integrity and confidentiality.

Mitigation Strategies

Update Xinference to the latest version where the is_valid_model_name function rejects backslashes and path traversal sequences. If updating is not possible, restrict write permissions for the Xinference process to prevent file modifications. Disable unauthenticated access to model registration endpoints if feasible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112051. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart