---
id: "CVE-2026-115800"
kind: "vulnerability"
aliases: ["CVE-2026-115800"]
title: "mllm model convertor: shard_file argument allows local path traversal"
severity: "medium"
cvss: 5.3
epss: 0.00172
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["mllm", "package", "pymllm", "python"]
not_affected_if: ["no-untrusted-shard-file-input"]
published_at: "2026-10-23T21:17:23+00:00"
first_seen_at: "2026-10-23T21:57:34+00:00"
updated_at: "2026-10-25T12:38:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115800", "first_seen_at": "2026-10-23T21:57:34+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-115800", "first_seen_at": "2026-10-25T12:38:50+00:00"}]
---

# mllm model convertor: shard_file argument allows local path traversal

The load_model function in the mllm convertor (pymllm/mobile/convertor) does not restrict the shard_file argument, so a crafted value can reach files outside the intended directory. An attacker with local access can make the convertor read files the running user is allowed to open.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-23T21:57:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-115800
- 2026-10-25T12:38:50+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-115800

## From the sources

A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/mobile/convertor/__init__.py of the component Convertor. The manipulation of the argument shard_file leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_