Weak Hash Vulnerability in PaddlePaddle FastDeploy MultimodalHasher Component
CVE-2026-10800

2LOW

Key Information:

Vendor

Paddlepaddle

Status
Fastdeploy
Vendor
CVE Published:
4 June 2026

What is CVE-2026-10800?

A vulnerability has been identified in PaddlePaddle FastDeploy up to version 2.4.1 within the MultimodalHasher component, specifically in the hash_features function of fastdeploy/multimodal/hasher.py. This weakness could potentially allow an attacker, with local access, to exploit weak hashing algorithms, ultimately compromising the integrity of hashed data. Due to the high complexity requirement for exploitation, it is recommended that users apply the patch 374945747652a8d32965591c0c01a00c88b7067f to mitigate this vulnerability.

Affected Version(s)

FastDeploy 2.4.0

FastDeploy 2.4.1

References

https://vuldb.com/vuln/368249
vdb-entrytechnical-description
https://vuldb.com/vuln/368249/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-10800
third-party-advisory

CVSS V4

Score:
2
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dem0 (VulDB User)
.