CVE-2026-47117
OpenMed versions before 1.5.2 contain a remote code execution flaw. An attacker can supply a specially crafted model name that causes the service to load and run arbitrary code from a Hugging Face model. This allows the attacker to execute code with the same privileges as the OpenMed service.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
OpenMed software versions older than 1.5.2.
Real-world impact
An attacker can run any code on the server, potentially taking full control of the system and accessing sensitive data.
Why this severity
The CVSS score of 9.3 reflects a critical vulnerability: it requires no authentication, can be exploited with minimal effort, and gives the attacker high impact by allowing arbitrary code execution.
What to do about it
- 01Upgrade OpenMed to version 1.5.2 or later.
NVD description
Timeline
- Jun 2, 2026 · Jun 2, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 22, 2026 · 13d agoAdvisory updatedThe NVD record was last revised.
- Jul 25, 2026 · 10d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.