Live › vulnerability › CVE-2026-115802
Go to dashboardInternAgent 1.5.0 has a weakness in the train function of tasks/AutoChem/code/experiment.py, where the base_model_name_or_path argument is used to load functionality from an untrusted source. A remote attacker who supplies a crafted value can get their own code included and run.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-24 08:17 UTC. All times on this page are UTC.
Teams running InternAgent 1.5.0 with the AutoChem LoRA loading path reachable from remote input. The sources do not say whether the default configuration exposes this path, so unknown.
No product ranges from the sources yet.
1.5.0 in the project's package or release metadata.base_model_name_or_path in tasks/AutoChem/code/experiment.py and see whether it reaches a model loading call with remote code trust enabled.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. This manipulation of the argument base_model_name_or_path causes inclusion of functionality from untrusted control sphere. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
This page as .md · .json · in your agent: get_signal("CVE-2026-115802")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.