CVE-2025-3622 — Xorbits Inference model.py load deserialization
A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvo…
Published: 2025-04-15 · CVSS: 5.1 · CVSS 4.0
A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7