---
id: "CVE-2026-122015"
kind: "vulnerability"
aliases: ["CVE-2026-122015"]
title: "npcpy MLX provider: improper input validation in model argument"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "llm-agents", "mlx", "npcpy", "python"]
not_affected_if: ["default-config", "hardcoded-model-name"]
published_at: "2026-11-04T22:17:55+00:00"
first_seen_at: "2026-11-04T23:08:48+00:00"
updated_at: "2026-11-04T23:09:53+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122015", "first_seen_at": "2026-11-04T23:08:48+00:00"}]
exploit_sources: []
---

# npcpy MLX provider: improper input validation in model argument

npcpy, an NPC-Worldwide Python library for LLM agents, has an input validation flaw in its MLX provider's get_mlx_response function, triggered through the model argument. The exploit is public, and the sources say an attacker can trigger it remotely, but they do not state what an attacker gets beyond that.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed npcpy version with `pip show npcpy`; versions up to 2.1.27 are affected.
- Look for calls to `get_mlx_response` or the MLX provider in `npcpy/gen/response.py` that pass user-controlled values as `model`.

## Fix

- npcpy: unknown; the sources do not name a fixed version.

## Timeline

- 2026-11-04T23:08:48+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122015

## From the sources

A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get_mlx_response of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in improper input validation. The attack can be launched remotely. The exploit has been made public and could be used.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_