Moyenne
5.3
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is...
CVE-2026-115800
Première détection SecPulse
Paquets affectés
| Écosystème | Paquet | Concernées | Corrigé |
|---|---|---|---|
| UbiquitousLearning | mllm | — | — |
Description d'origine La description telle que publiée par la source (souvent en anglais).
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/mobile/convertor/init.py of the component Convertor. The manipulation of the argument shard_file leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
Références
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com
- web nvd.nist.gov
- web github.com
- web github.com