CVE-2026-108961: Code Injection in PaddlePaddle PaddleX

This vulnerability in PaddlePaddle PaddleX (up to version 3.7.2) involves the NormalizeImage.__init__ function in the file paddlex/inference/models/text_detection/processors.py. Improper handling of the 'scale' argument allows an attacker to perform code injection remotely. The issue affects the Preprocessor component and could lead to execution of arbitrary code. Although a fix has been created, it has not yet been merged or officially released.

Successful exploitation allows remote attackers to inject and execute arbitrary code via the manipulated 'scale' argument in the NormalizeImage.__init__ function. This could compromise the affected system's integrity and potentially lead to further attacks. The vulnerability has a medium severity rating (CVSS 5.3). No known exploits are reported in the wild at this time.

A fix for this vulnerability exists in the form of a pull request, but it has not yet been accepted or released. Users should monitor the official PaddlePaddle PaddleX repository or vendor advisories for the acceptance and release of the patch. Until then, caution is advised when using affected versions (3.7.0 to 3.7.2), especially in environments exposed to untrusted inputs. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance.