CVE-2026-85686 | ModelScope ms-swift up to 4.5.2 Swift Deploy OpenAI-Compatible API image_url/audio_url/video_url server-side request forgery

September 4, 2026 Yanac

A vulnerability marked as problematic has been reported in ModelScope ms-swift up to 4.5.2. Impacted is an unknown function of the component Swift Deploy OpenAI-Compatible API. The manipulation of the argument image_url/audio_url/video_url leads to server-side request forgery.

This vulnerability is listed as CVE-2026-85686. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More