{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/multi-model-server--1.1.11/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:amazon:multi_model_server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-115812"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Multi Model Server (\u003c= 1.1.11)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Amazon"],"content_html":"\u003cp\u003eAmazon Web Services Multi Model Server (MMS) versions 1.1.11 and earlier contain a relative path traversal vulnerability. An attacker can exploit this during model archive extraction to potentially execute arbitrary code. Multi Model Server is end of life and no fixed version is available.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability has been assigned a CVSS v3.1 base score of 9.8.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDiscontinue use of Multi Model Server.\u003c/li\u003e\n\u003cli\u003eMigrate to a supported model serving solution.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-23T19:51:00Z","date_published":"2026-10-23T19:51:00Z","id":"https://feed.craftedsignal.io/briefs/2026-10-aws-multi-model-server-path-traversal/","summary":"Amazon Web Services Multi Model Server 1.1.11 and earlier is vulnerable to a relative path traversal attack during model archive extraction, which may allow remote actors to execute arbitrary code via a crafted model archive.","title":"Amazon Web Services Multi Model Server: Relative path traversal (CVE-2026-115812)","url":"https://feed.craftedsignal.io/briefs/2026-10-aws-multi-model-server-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Multi Model Server (\u003c= 1.1.11)","version":"https://jsonfeed.org/version/1.1"}