AI-Infra-Guard vulnerabilities

CVEs whose affected-version data names the AI-Infra-Guard package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-101080Medium· 4.8PoC

1mo ago

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skill_scan/tools/dir/dir_actions.py of the component File Access. The manipulation leads to path traversal. The …

▾ TwilightTencent · AI-Infra-GuardEPSS 0.14%via NVD

CVE-2026-84809Medium· 6.5PoC

1mo ago

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can dist…

▾ TwilightTencent · AI-Infra-GuardEPSS 0.57%via NVD