7.5

CVE-2026-0599: Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference

Deferred
AliasesGHSA-j7x9-7j54-2v3hPYSEC-2026-1965
Published 02-02-2026Last modified 02-02-2026

Vulnerability summary

CVE-2026-0599 is a high (CVSS 7.5) Uncontrolled Resource Consumption vulnerability in huggingface huggingface/text-generation-inference. EPSS estimates a 29.49% chance of exploitation in the next 30 days, higher than 98.1% of scored vulnerabilities.

Priority
Prioritisesevere

Severe, CVSS 7.5 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 29% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?
CVSS score
7.5/10
010
High · v3.0 (CVE.org)
EPSS score
29.49%
0%100%
High · -0.38 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Timeline

  1. 02-02-2026
    PublishedVulnerability first disclosed.
  2. 02-02-2026
    Last modifiedVulnerability information updated.

Description

A vulnerability in huggingface/text-generation-inference version 3.3.6 allows unauthenticated remote attackers to exploit unbounded external image fetching during input validation in VLM mode. The issue arises when the router scans inputs for Markdown image links and performs a blocking HTTP GET request, reading the entire response body into memory and cloning it before decoding. This behavior can lead to resource exhaustion, including network bandwidth saturation, memory inflation, and CPU overutilization. The vulnerability is triggered even if the request is later rejected for exceeding token limits. The default deployment configuration, which lacks memory usage limits and authentication, exacerbates the impact, potentially crashing the host machine. The issue is resolved in version 3.3.7.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

29.49%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

Decrease -0.38 pp

From 29.88% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Huggingface1 product
PyPI1 product
  • text-generation< 3.3.7

2 vendors · 2 products

References

6 links