Live › vulnerability › CVE-2026-111212
Go to dashboardImprintLab Medical-SAM-Adapter 0.1.0 and 0.1.0-alpha load model metadata through AutoBackend, which evaluates crafted imgsz, names or kpt_shape values as code. A local attacker who supplies a malicious model file can run commands as the user loading it, and a public exploit exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running ImprintLab Medical-SAM-Adapter 0.1.0-alpha or 0.1.0 that load model weights or metadata from files they did not create. Exposure depends on a local attacker being able to place a model file where the loader reads it. Teams that only use models they built or trust, or that run other versions, can skip this.
No product ranges from the sources yet.
0.1.0-alpha or 0.1.0.models/MobileSAMv2/ultralytics/nn/autobackend.py in the codebase and see whether custom_metadata_map is evaluated with eval or exec.Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.get_modelmeta.custom_metadata_map of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt_shape results in improper neutralization of directives in dynamically evaluated code. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-111212")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.