What is CVE-2026-12491?

CVE-2026-12491 is a medium-severity vulnerability in Red Hat Ai Inference Server, classified under CWE-115. CVSS score: 4.8/10. Published 2026-06-17.

How severe is CVE-2026-12491?

Medium severity. CVSS v3 base score is 4.8 out of 10.

Vulnerability in Red Hat Ai Inference Server

CVE-2026-12491

A flaw was found in vLLM, an open-source library for large language model inference. This vulnerability arises from improper handling of image metadata, specifically EXIF orientation and PNG transparency (tRNS) data, during image processin…

CVSS v3 metric

CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L.

Affected products

Red Hat Ai Inference Server
Red Hat Enterprise Linux Ai (Rhel Ai) 3
Red Hat Openshift Ai (Rhoai)

Weakness classification (CWE)

CWE-115

References

secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
secalert@redhat.com (x_refsource_REDHAT, issue-tracking)

Frequently asked questions

What is CVE-2026-12491?: CVE-2026-12491 is a medium-severity vulnerability in Red Hat Ai Inference Server, classified under CWE-115. CVSS score: 4.8/10. Published 2026-06-17.
How severe is CVE-2026-12491?: Medium severity. CVSS v3 base score is 4.8 out of 10.