CVE-2026-15143Critical· 9.3▾ MidnightA flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can l…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 51.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.
guardrails-detectors < 985c6d5a4a84360ff8b447b94e4a3cdfbda3da90rhoai/odh-built-in-detector-rhel9 (all versions)rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-93294Medium· 6.3A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy)
CVE-2024-1233High· 7.3Eap: wildfly-elytron has a ssrf security issue
CVE-2026-103314High· 7.4Stackrox: stackrox: saml response replay allows multiple central authentication tokens
CVE-2026-112214Medium· 6.5Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser
CVE-2026-112210Medium· 6.0Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service
CVE-2026-16460High· 7.4bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization (CVE-2026-16460)