{"id":"CVE-2026-125087","kind":"vulnerability","aliases":["CVE-2026-125087"],"related":[],"title":"Shimmy: inference API lacks authentication, allowing remote access","description":"A vulnerability was found in Michael-A-Kuykendall Shimmy up to 2.6.4. The affected element is an unknown function of the file src/server.rs of the component Inference API. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. Upgrading to version 2.6.5 is sufficient to fix this issue. The patch is named 3f2ee748c02eeb229987913fe289a2ed9a24595d. You should upgrade the affected component.","summary":"Shimmy, a Rust server that runs local language models, has an inference API in src/server.rs that does not require authentication. A remote attacker can send requests to it without credentials.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"shimmy","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["ai-tooling","local-llm","openai-compatible-api","rust","shimmy"],"not_affected_if":["version-2.6.5-or-later"],"how_to_check":"- Check the installed Shimmy version; versions up to `2.6.4` are affected.\n- Check whether the Inference API is reachable from networks other than the local machine.","fix":"- Shimmy: upgrade to `2.6.5`.","status":"open","published_at":"2026-11-10T01:17:19+00:00","first_seen_at":"2026-11-10T01:26:41+00:00","triaged_at":"2026-11-10T01:28:34+00:00","updated_at":"2026-11-10T01:28:34+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-11-10T01:28:34Z","model":"claude-haiku-5-5","output":{"fix":"- Shimmy: upgrade to `2.6.5`.","reach":"internet","title":"Shimmy: inference API lacks authentication, allowing remote access","impact":"medium","summary":"Shimmy, a Rust server that runs local language models, has an inference API in src/server.rs that does not require authentication. A remote attacker can send requests to it without credentials.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["shimmy","local-llm","openai-compatible-api","rust"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"Remote attackers use the inference API without any credentials","analyst_note":"","how_to_check":"- Check the installed Shimmy version; versions up to `2.6.4` are affected.\n- Check whether the Inference API is reachable from networks other than the local machine.","plain_action":"","product_name":"shimmy","needs_analyst":false,"not_affected_if":["version-2.6.5-or-later"],"who_is_affected":"Teams that run Shimmy as an inference server reachable over the network are exposed, because the API accepts requests without authentication. Installations limited to the local machine, or running `2.6.5` or later, are not affected by this issue.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.001227,"input_tokens":4636,"output_tokens":1526,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-125087':11A,14A '-2026':10A,13A '2.6.4':70C '2.6.5':106C '3f2ee748c02eeb229987913fe289a2ed9a24595d':117C 'access':8A 'affect':72C,122C 'ai':17B 'ai-tool':16B 'allow':6A 'api':3A,25B,40B,86C 'attack':50B,95C 'authent':5A,47B,93C 'carri':100C 'compat':24B 'compon':84C,123C 'credenti':57B 'cve':9A,12A 'element':73C 'file':80C 'fix':110C 'found':61C 'function':77C 'infer':2A,39B,85C 'issu':112C 'kuykendal':66C 'lack':4A 'languag':35B 'llm':21B 'local':20B,34B 'local-llm':19B 'manipul':89C 'michael':64C 'michael-a-kuykendal':63C 'miss':92C 'model':36B 'name':116C 'openai':23B 'openai-compatible-api':22B 'patch':114C 'perform':87C 'possibl':97C 'remot':7A,49B,102C 'request':53B 'requir':46B 'result':90C 'run':33B 'rust':26B,30B 'send':52B 'server':31B 'shimmi':1A,27B,28B,67C 'shimmy':15A 'src/server.rs':42B,81C 'suffici':108C 'tool':18B 'unknown':76C 'upgrad':103C,120C 'version':105C 'vulner':59C 'without':56B","nicknames":[],"mitigations":[],"who_affected":"Teams that run Shimmy as an inference server reachable over the network are exposed, because the API accepts requests without authentication. Installations limited to the local machine, or running `2.6.5` or later, are not affected by this issue.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["shimmy"],"ptokens":["shimmy"],"labels":["aitooling","high","localllm","openaicompatibleapi","rust","shimmy","vendor"],"campaign_type":null,"search_a":"'-125087':11A,14A '-2026':10A,13A 'access':8A 'allow':6A 'api':3A 'authent':5A 'cve':9A,12A 'infer':2A 'lack':4A 'remot':7A 'shimmi':1A 'shimmy':15A","search_b":"'ai':17B 'ai-tool':16B 'api':25B,40B 'attack':50B 'authent':47B 'compat':24B 'credenti':57B 'infer':39B 'languag':35B 'llm':21B 'local':20B,34B 'local-llm':19B 'model':36B 'openai':23B 'openai-compatible-api':22B 'remot':49B 'request':53B 'requir':46B 'run':33B 'rust':26B,30B 'send':52B 'server':31B 'shimmi':27B,28B 'src/server.rs':42B 'tool':18B 'without':56B","search_c":"'2.6.4':70C '2.6.5':106C '3f2ee748c02eeb229987913fe289a2ed9a24595d':117C 'affect':72C,122C 'api':86C 'attack':95C 'authent':93C 'carri':100C 'compon':84C,123C 'element':73C 'file':80C 'fix':110C 'found':61C 'function':77C 'infer':85C 'issu':112C 'kuykendal':66C 'manipul':89C 'michael':64C 'michael-a-kuykendal':63C 'miss':92C 'name':116C 'patch':114C 'perform':87C 'possibl':97C 'remot':102C 'result':90C 'shimmi':67C 'src/server.rs':81C 'suffici':108C 'unknown':76C 'upgrad':103C,120C 'version':105C 'vulner':59C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T01:17:19+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-125087","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125087","severity":null,"published_at":"2026-11-10T01:17:19+00:00","modified_at":"2026-11-10T01:17:20+00:00","first_seen_at":"2026-11-10T01:26:41+00:00","fetched_at":"2026-11-10T01:26:41+00:00","note":null}],"documents":[{"id":112362,"url":"https://github.com/Michael-A-Kuykendall/shimmy/commit/3f2ee748c02eeb229987913fe289a2ed9a24595d","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":112363,"url":"https://github.com/Michael-A-Kuykendall/shimmy/releases/tag/v2.6.5","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}