Live › vulnerability › CVE-2026-112140
Go to dashboardDoctor-Dignity's vendored MLC chat runtime builds a shared-library filename from the model_lib string in a model package's mlc-chat-config.json. It searches the package directory itself and loads the first match via tvm.runtime.load_module (dlopen). A malicious model package that ships its own .so therefore runs native code in the chat process when loaded. It is not a network service bug: the victim must load an attacker-supplied package. The reporter notes upstream mlc-llm of the same era has the same logic.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Doctor-Dignity, or an MLC chat runtime copy with the same _get_lib_module logic, that load model packages from third parties or untrusted downloads (the project's quickstart flow does). Exploitation needs the victim to load a crafted package; it is not reachable by a remote request alone. Teams that only load models they built themselves, or do not use this project, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| llSourcell/Doctor-Dignity | github | <= 3f2ffb6c892f13b50a708d05900d3227acb40ded (all commits, no releases) | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function _get_lib_module of the file python/mlc_chat/chat_module.py. The manipulation of the argument model_lib results in code injection. The attack may be launched remotely. The exploit has been made public and could be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-112140")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.