CVE-2026-112051: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in xorbitsai inference

CVE-2026-112051 is a path traversal vulnerability in Xinference (up to version 4.0.1) on Windows platforms. The flaw allows unauthenticated attackers to manipulate the model_name parameter in POST requests to /v1/model_registrations/{model_type} with crafted backslash sequences (e.g., ..\..\evil), enabling them to write or delete arbitrary .json files. This can result in overwriting configuration or data files that the Xinference process has write access to, potentially impacting the integrity and availability of the application.

An unauthenticated attacker can exploit this vulnerability to write and delete arbitrary .json files within the filesystem accessible to the Xinference process on Windows. This can lead to unauthorized modification or deletion of configuration or data files, potentially disrupting service or enabling further attacks. The CVSS 4.0 score of 8.3 reflects a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on integrity.

No official patch or fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected API endpoint and validate or sanitize input parameters to prevent path traversal sequences in model_name.