CVE-2025-3622

Name of the Vulnerable Software and Affected Versions Xorbits Inference versions up to 1.4.1

Description A critical vulnerability has been found in Xorbits Inference, affecting the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization.

Recommendations For Xorbits Inference versions up to 1.4.1, consider disabling the function load of the file xinference/thirdparty/cosyvoice/cli/model.py as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.