A vulnerability marked as critical has been reported in Step-Video-T2V. This impacts the function
get_data of the file /vae-api. Performing a manipulation results in deserialization.
This vulnerability is known as CVE-2025-57622. Remote exploitation of the attack is possible. No exploit is available.