Live › vulnerability › CVE-2026-115800
Go to dashboardThe load_model function in the mllm convertor (pymllm/mobile/convertor) does not restrict the shard_file argument, so a crafted value can reach files outside the intended directory. An attacker with local access can make the convertor read files the running user is allowed to open.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run the mllm Python convertor (pymllm mobile convertor) on versions up to 2.0.2 with untrusted input passed as shard_file. Systems that only use mllm at a fixed, trusted path are less exposed. The sources do not say which versions beyond 2.0.2 are affected.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/mobile/convertor/init.py of the component Convertor. The manipulation of the argument shard_file leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-115800")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.