The flaw allows an unauthenticated user to manipulate the model_name field in the POST /v1/model_registrations/{model_type} endpoint, causing a Windows path traversal that writes or deletes arbitrary .json files. Because the attacker can target configuration and data files that are writable by the Xinference process, the vulnerability can corrupt installation integrity and facilitate further compromise. The weakness is a classic CWE‑22 path traversal scenario.

This issue affects the xorbitsai inference product on Windows for all releases up to and including version 4.0.1. Any installation running these versions without a patched update is vulnerable.

With a CVSS score of 8.3, the flaw is high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating it may not yet be widely exploited. Attackers can remotely exploit the flaw over HTTP by sending a malicious model_name value using backslashes and relative segments, such as '..\..\evil', to create or overwrite files writable by the Xinference process. Because no authentication is required, any network access to the endpoint can lead to exploitation.