{"id":"CVE-2026-115800","kind":"vulnerability","aliases":["CVE-2026-115800"],"related":[],"title":"mllm model convertor: shard_file argument allows local path traversal","description":"A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/mobile/convertor/__init__.py of the component Convertor. The manipulation of the argument shard_file leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.","summary":"The load_model function in the mllm convertor (pymllm/mobile/convertor) does not restrict the shard_file argument, so a crafted value can reach files outside the intended directory. An attacker with local access can make the convertor read files the running user is allowed to open.","severity":"medium","cvss":5.3,"epss":0.00172,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["mllm","package","pymllm","python"],"not_affected_if":["no-untrusted-shard-file-input"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-23T21:17:23+00:00","first_seen_at":"2026-10-23T21:57:34+00:00","triaged_at":"2026-10-25T04:18:48+00:00","updated_at":"2026-10-25T12:38:50+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T04:18:48Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"mllm model convertor: shard_file argument allows local path traversal","impact":"low","summary":"The load_model function in the mllm convertor (pymllm/mobile/convertor) does not restrict the shard_file argument, so a crafted value can reach files outside the intended directory. An attacker with local access can make the convertor read files the running user is allowed to open.","category":"package","nicknames":[],"who_cares":["mllm","python","pymllm"],"confidence":0.6,"needs_auth":"unknown","worst_case":"local user reads files outside the intended model directory","analyst_note":"Check the NVD entry and the upstream repository issue to confirm the fixed version and whether the convertor is reachable with untrusted input.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["no-untrusted-shard-file-input"],"who_is_affected":"Teams that run the mllm Python convertor (pymllm mobile convertor) on versions up to 2.0.2 with untrusted input passed as shard_file. Systems that only use mllm at a fixed, trusted path are less exposed. The sources do not say which versions beyond 2.0.2 are affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000562,"input_tokens":3350,"output_tokens":454,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115800':13A,16A '-2026':12A,15A '2.0.2':75C 'access':52B 'affect':77C 'allow':7A,63B 'argument':6A,36B,96C 'attack':49B,104C 'avail':114C 'compon':90C 'convertor':3A,28B,56B,91C 'craft':39B 'cve':11A,14A 'directori':47B 'earli':126C 'element':78C 'exploit':111C 'file':5A,35B,43B,58B,86C,98C 'function':24B,81C 'identifi':69C 'inform':122C 'intend':46B 'issu':129C 'lead':99C 'load':22B,82C 'local':8A,51B,109C 'make':54B 'manipul':93C 'might':116C 'mllm':1A,17B,27B,72C 'model':2A,23B,83C 'need':105C 'open':65B 'outsid':44B 'packag':18B 'path':9A,101C 'perform':108C 'problem':125C 'project':120C 'public':113C 'pymllm':19B 'pymllm/mobile/convertor':29B 'pymllm/mobile/convertor/__init__.py':87C 'python':20B 'reach':42B 'read':57B 'report':130C 'respond':134C 'restrict':32B 'run':60B 'shard':4A,34B,97C 'travers':10A,102C 'ubiquitouslearn':71C 'use':118C 'user':61B 'valu':40B 'vulner':67C 'yet':135C","nicknames":[],"mitigations":[],"who_affected":"Teams that run the mllm Python convertor (pymllm mobile convertor) on versions up to 2.0.2 with untrusted input passed as shard_file. Systems that only use mllm at a fixed, trusted path are less exposed. The sources do not say which versions beyond 2.0.2 are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T21:17:23+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115800","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115800","severity":null,"published_at":"2026-10-23T21:17:23+00:00","modified_at":"2026-10-23T21:17:23+00:00","first_seen_at":"2026-10-23T21:57:34+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115800","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115800","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:50+00:00","fetched_at":"2026-10-25T12:38:50+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}