HIGHUnknown

modelscope: ModelScope: Arbitrary code execution via unsafe YAML deserialization

modelscope: ModelScope: Arbitrary code execution via unsafe YAML deserialization

CVE-2026-84202Published 5 days agoUpdated 5 days agoSource: Red Hat

Affected packages

No package-level mapping for this advisory.

Exploit signal

Known exploited (CISA KEV)
No
EPSS score
EPSS percentile

EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.

modelscope: ModelScope: Arbitrary code execution via unsafe YAML deserialization | HackTribune