PT-2026-45783 · Openmed · Openmed

Vulncheck · Published 2026-06-02 · Updated 2026-06-02 · CVE-2026-47117

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenMed versions prior to 1.5.2

Description Remote code execution is possible in the PII privacy-filter model loading path. The privacy-filter dispatcher uses broad substring matching on the user-supplied model name parameter, which allows a value to route through a path that loads Hugging Face models with trust remote code=True. An unauthenticated attacker can provide a malicious model repository containing custom Transformers code via auto map in config.json or tokenizer config.json, which is then imported and executed with the privileges of the OpenMed service process.

Recommendations Update to version 1.5.2.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-47117

Affected Products

Openmed

References · 6

• https://github.com/maziyarpanahi/openmed/commit/98724f65df98d7518b9006e6356740aa36c2f224 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-47117 · Security Note
• https://github.com/maziyarpanahi/openmed/releases/tag/v1.5.2 · Note
• https://github.com/maziyarpanahi/openmed/pull/59 · Note
• https://twitter.com/OrizonCyber/status/2061847834463199267 · Twitter Post
• https://vulncheck.com/advisories/openmed-remote-code-execution-via-pii-model-loading · Note