DEV Community: threataft The latest articles on DEV Community by threataft (@threataft_dev). https://dev.to/threataft_dev https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4149686%2F154f0204-98e0-4763-9356-92e37eb31c9e.png DEV Community: threataft https://dev.to/threataft_dev en CTranslate2 CVE-2026-102566 & CVE-2026-102567 — Heap Overflow in AI Model Loader threataft Wed, 30 Sep 2026 01:31:21 +0000 https://dev.to/threataft_dev/ctranslate2-cve-2026-102566-cve-2026-102567-heap-overflow-in-ai-model-loader-552n https://dev.to/threataft_dev/ctranslate2-cve-2026-102566-cve-2026-102567-heap-overflow-in-ai-model-loader-552n <p>A malicious model file is enough to corrupt memory in CTranslate2 — the inference <br> engine behind Whisper, OpenNMT, and dozens of AI applications.</p> <p>Two memory-safety flaws disclosed September 29, 2026. Both affect CTranslate2 before <br> 4.8.1. Both are fixed in 4.8.1.</p> <h2> The CVEs </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>CVE</th> <th>CVSS</th> <th>Type</th> <th>Component</th> </tr> </thead> <tbody> <tr> <td>CVE-2026-102566</td> <td><strong>7.8</strong></td> <td>CWE-120 Heap Buffer Overflow</td> <td>Binary model loader</td> </tr> <tr> <td>CVE-2026-102567</td> <td><strong>6.1</strong></td> <td>CWE-125 Out-of-Bounds Read</td> <td>String field deserialization</td> </tr> </tbody> </table></div> <h2> What happened </h2> <p><strong>CVE-2026-102566</strong> — The binary model loader reads a payload length from the model <br> file but never validates it against the allocated heap buffer before copying. Craft a <br> model file with an inflated length field, write past the heap boundary, corrupt <br> adjacent memory structures. Arbitrary code execution.</p> <p><strong>CVE-2026-102567</strong> — String fields in model files are deserialized without verifying <br> a null terminator exists. The loader reads past the buffer into adjacent heap memory — <br> crash or memory disclosure. In AI-as-a-Service deployments this could expose user data <br> stored nearby.</p> <h2> Why AI pipelines are exposed </h2> <p>CTranslate2 powers Whisper, OpenNMT, and countless custom inference services. Model <br> files get pulled from Hugging Face, GitHub releases, internal registries — often <br> automatically in CI/CD pipelines. The attack surface is: anyone who can put a model <br> file in front of your inference server.</p> <p>No public PoC exists yet. The attack requires only that a victim loads the malicious <br> file.</p> <h2> Fix </h2> <p>Upgrade to <strong>CTranslate2 4.8.1</strong> immediately.</p> <p>Until patched:</p> <ul> <li>Restrict model loading to trusted, verified sources</li> <li>Validate checksums before loading model files</li> <li>Audit any pipeline that ingests third-party models</li> <li>Restrict who can upload to model endpoints</li> </ul> <p>Vulnerabilities reported by Chegne Eu Joe via VulnCheck.</p> <p><em>Full analysis with CVSS vectors, CWE classifications, and mitigation checklist:</em><br><br> <em><a href="https://threataft.com/articles/ctranslate2-cve-2026-102566-102567-model-loader" rel="noopener noreferrer">CTranslate2 CVE-2026-102566 &amp; CVE-2026-102567</a></em></p> <p><em>Originally published at <a href="https://threataft.com" rel="noopener noreferrer">ThreatAft</a></em></p> ai security cybersecurity vulnerabilities RaspAP Mass Disclosure — 3 CVEs, Privilege Escalation + RCE, No Patch threataft Tue, 29 Sep 2026 17:06:00 +0000 https://dev.to/threataft_dev/raspap-mass-disclosure-3-cves-privilege-escalation-rce-no-patch-16ki https://dev.to/threataft_dev/raspap-mass-disclosure-3-cves-privilege-escalation-rce-no-patch-16ki <p>Three vulnerabilities in RaspAP raspap-webgui were disclosed on September 28, 2026 — all with public proof-of-concept exploits. The vendor was contacted and did not respond. No patches exist.</p> <h2> The CVEs </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>CVE</th> <th>CVSS</th> <th>Type</th> <th>Component</th> </tr> </thead> <tbody> <tr> <td>CVE-2026-101860</td> <td><strong>8.8</strong></td> <td>Privilege escalation</td> <td>PluginInstaller::addSudoers</td> </tr> <tr> <td>CVE-2026-101859</td> <td><strong>5.4</strong></td> <td>OS command injection</td> <td>OpenVPN del_ovpncfg.php</td> </tr> <tr> <td>CVE-2026-101858</td> <td><strong>4.7</strong></td> <td>OS command injection</td> <td>WiFiManager::writeWpaSupplicant</td> </tr> </tbody> </table></div> <h2> What happened </h2> <p><strong>CVE-2026-101860</strong> is the serious one. The <code>PluginInstaller::addSudoers</code> function allows manipulation of the sudoers configuration without adequate authorization checks. An attacker with web interface access can grant themselves unrestricted root execution on the underlying Raspberry Pi OS.</p> <p><strong>CVE-2026-101859</strong> is OS command injection via the <code>cfg_id</code> parameter in <code>ajax/openvpn/del_ovpncfg.php</code>. The <code>escapeshellcmd</code> function is used incorrectly — injection through the OpenVPN configuration deletion handler.</p> <p><strong>CVE-2026-101858</strong> is OS command injection via the <code>ssid</code> argument in <code>WiFiManager::writeWpaSupplicant</code>. Requires authenticated access but the barrier is low on a home/edge device.</p> <h2> Why it matters </h2> <p>RaspAP is the de facto standard for turning a Raspberry Pi into a wireless router. These devices sit at the network edge. Root compromise via the web UI = foothold inside your local network.</p> <p>Public PoCs are available for all three. No vendor fix is coming. The only realistic path is isolation.</p> <h2> What to do right now </h2> <ol> <li> <strong>Restrict the web interface</strong> — firewall rules, trusted IPs only</li> <li> <strong>Monitor /etc/sudoers</strong> — file integrity monitoring on this path</li> <li> <strong>Disable plugin installation</strong> if you don't use it (removes the CVE-2026-101860 attack surface)</li> <li> <strong>Strong authentication</strong> — change defaults, add 2FA if supported</li> </ol> <p><em>Full technical analysis with CVSS vectors, CWE classifications, and mitigation checklist:</em><br> <em><a href="https://threataft.com/articles/raspap-mass-disclosure-cve-2026-101860-101859-101858" rel="noopener noreferrer">RaspAP Mass Disclosure — CVE-2026-101860, CVE-2026-101859, CVE-2026-101858</a></em></p> <p><em>Originally published at <a href="https://threataft.com" rel="noopener noreferrer">ThreatAft</a></em></p> security vulnerabilities cybersecurity networking