HIGH8.7Go
GHSA-324q-cwx9-7crr· CVE-2026-34940, GO-2026-4920KubeAI: OS Command Injection via Model URL in Ollama Engine startup probe allows arbitrary command execution in model pods
Modified: 4/15/2026
package
Go/github.com/kubeai-project/kubeai
pkg:go/github.com/kubeai-project/kubeai
—Go
GO-2026-4920· CVE-2026-34940, GHSA-324q-cwx9-7crrKubeAI: OS Command Injection via Model URL in Ollama Engine startup probe allows arbitrary command execution in model pods in github.com/kubeai-project/kubeai
Modified: 4/6/2026