CVE-2026-125087 | Michael-A-Kuykendall Shimmy up to 2.6.4 Inference API src/server.rs missing authentication (Issue 221)

A vulnerability identified as critical has been detected in Michael-A-Kuykendall Shimmy up to 2.6.4. The affected element is an unknown function of the file src/server.rs of the component Inference API. Performing a manipulation results in missing authentication.

This vulnerability is reported as CVE-2026-125087. The attack is possible to be carried out remotely. Moreover, an exploit is present.

You should upgrade the affected component.VulDB Recent EntriesRead More