CVE-2026-6608CWE-670

lm-sys fastchat Arena Side-by-Side View add_text control flow

Medium · published April 20, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add_text of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was fixed in commit 34eca62 for gradio_block_arena_named.py, but three other files were missed.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00511 · 42.7th percentile
Weakness
CWE-670 · Always-Incorrect Control Flow Implementation
Published
2026-04-20T05:15Z
EPSS history
Timeline
  • 20 APR 05:15Z
    lm-sys fastchat Arena Side-by-Side View add_text control flow
    cvelistv5