CVE-2026-41512
ai-scanner is an AI model safety scanner built on NVIDIA garak.
Published May 8, 2026 · updated Jun 17, 2026 · mozilla 0din scanner
ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in . This issue has been patched in version 1.4.1.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
May 8, 2026 · NIST NVD
Detected
ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in . This issue has been patched in version 1.4.1.
Jun 17, 2026 · NIST NVD
Updated
ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in . This issue has been patched in version 1.4.1.
Affected
- cpe mozilla/0din scannerversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-41512
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-41512
ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in . This issue has been patched in version 1.4.1.
nvd.nist.gov