CVE-2026-41512: 0din-ai ai-scanner Code Injection
CVSS: 9.9v3.1CriticalAnalyzed
Published 08-05-2026Last modified 08-05-2026
Vulnerability summary
CVE-2026-41512 is a critical (CVSS 9.9) Code Injection vulnerability in 0din-ai ai-scanner. EPSS estimates a 0.77% chance of exploitation in the next 30 days, higher than 54.7% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
9.9/10
010
Critical · v3.1 (CVE.org)EPSS score
0.77%
0%100%
Low · +0.18 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github
Timeline
- 08-05-2026PublishedVulnerability first disclosed.
- 08-05-2026Last modifiedVulnerability information updated.
Description
ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in `BrowserAutomation::PlaywrightService`. This issue has been patched in version 1.4.1.
CVSS metrics
2 scores · 2 sources · 1 versionCritical 9.9Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HSourcesAll 2 agree
- NVDNIST9.9CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
0.77%
Chance of exploitation in the next 30 days
Percentile
55%
Versus all other CVEs
30-day change
+0.18 pp
From 0.59% on 18-09-2026
18-09-202618-10-2026
EPSS score0.77%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundAi Scanner
Maturity: poc
Weaknesses
CWE · root causeAffected systems
0din-ai1 product
- ai-scanner≥ 1.0.0, < 1.4.1
Mozilla1 product
- 0din_scanner≥ 1.0.0, < 1.4.1
2 vendors · 2 products
References
2 links- github.com/0din-ai/ai-scanner/security/advisories/GHSA-r27j-xxgx-f5vrX Refsource CONFIRMExploitVendor Advisory