Open Source AI
An Uploaded ML Model Can Run Code on Every Elasticsearch 8 and 9
CVE-2026-72649 turns a trained model artifact into remote code execution at CVSS 8.8. Unlike almost every other AI advisory published this week, Elastic names the versions that fix it.
9m ago
