Hugging Face Text Embeddings Inference vulnerabilities

1 vulnerability

Known vulnerabilities in Hugging Face Text Embeddings Inference, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2026-108857hugging face · text embeddings inferenceHugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key LoggingAttackers with access to router logs, container output, or OTLP telemetry can recover the Bearer token and call the protected embedding and rerank endpoints.CVSS4.8MediumEPSS0.11%