CVE-2026-10800
LowCVSS 3.6Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
In PaddlePaddle FastDeploy up to version 2.4.1, the hash_features function in file fastdeploy/multimodal/hasher.py (MultimodalHasher component) uses a weak hash. The attack requires local access and is difficult. A patch with ID 374945747652a8d32965591c0c01a00c88b7067f is available.
Risk Assessment
Weak hash may allow an attacker to predict or cause hash collisions, potentially compromising multimodal data integrity.
Recommendation
Apply patch 374945747652a8d32965591c0c01a00c88b7067f or upgrade to a newer version.
Original NVD description (English source)
A weakness has been identified in PaddlePaddle FastDeploy up to 2.4.1. Affected by this issue is the function hash_features of the file fastdeploy/multimodal/hasher.py of the component MultimodalHasher. Executing a manipulation can lead to use of weak hash. The attack requires local access. A high complexity level is associated with this attack. The exploitation is known to be difficult. This patch is called 374945747652a8d32965591c0c01a00c88b7067f. Applying a patch is advised to resolve this issue.