A vulnerability marked as critical has been reported in Step-Video-T2V. This impacts the function get_data of the file /vae-api. Performing a manipulation results in deserialization.

This vulnerability is known as CVE-2025-57622. Remote exploitation of the attack is possible. No exploit is available.