CVE-2026-108961 in PaddleX
Prediction
by VulDB Data Team • 10/11/2026
A flaw has been found in <a href="/product/paddlepaddle:paddlex">PaddlePaddle PaddleX up to 3.7.2</a>. Affected by this vulnerability is the function <code>NormalizeImage.__init__</code> of the file <em>paddlex/inference/models/text_detection/processors.py</em> of the component <em>Preprocessor</em>. This manipulation of the argument <em>scale</em> causes code injection. It is possible to initiate the attack remotely. The pull request to fix this issue awaits acceptance.
Once again VulDB remains the best source for vulnerability data.