Modular

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Modular records in CISA KEV

No Modular vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Max 1 record LOW

Records

1 record in Max · all components

TI-2025-37681 CVE-2025-60455 · GHSA-7xcv-9j6c-2fmc

Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when…

LOW 38

Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when the "--experimental-enable-kvcache-agent" feature is used allowing attackers to execute arbitrary code.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00333 Published 2025-11-18 Fixed in 25.6.0 CWE-502

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0