CVE-2026-108961: PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possible to initiate the attack remotely. The pull request to fix this issue awaits acceptance.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
PaddlePaddle PaddleX deployments using versions up to 3.7.2 are affected where the text-detection Preprocessor reaches NormalizeImage.__init__ in paddlex/inference/models/text_detection/processors.py and an attacker can influence its scale argument.
Does exploitation require authentication or direct user interaction?
The supplied CVSS vector indicates no privileges are required and the attack can be initiated remotely. It also indicates user interaction is required.
Is a fix available?
A pull request to fix the issue exists but is awaiting acceptance. The provided data does not identify an accepted fixed release or a temporary mitigation.