← Back

Max

max

Vendor: Modular • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-60455
1Modular
1Max
Jun 17, 2026
Nov 18, 2025
N/A· v4
8.4 HIGH· v3
N/A· v2
Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when the "--experimental-enable-kvcache-agent" feature is used allowing attackers to execute arbitrary code.