Together AI addresses Copy Fail vulnerability

Together AI has taken immediate action to address the Copy Fail vulnerability (CVE‑2026‑31431) by disabling the affected crypto socket interface across their infrastructure. This logic bug in the Linux kernel allows unprivileged users to exploit the system, posing significant risks in multi-tenant environments typical in AI workloads. The company has implemented a strategy to unload the vulnerable module and prevent its reactivation, ensuring minimal operational impact while maintaining security. Moving forward, they plan to roll out kernel patches gradually while keeping the vulnerable interface disabled in environments where it is not necessary.