CVE-2026-115800
UbiquitousLearning mllm Convertor __init__.py load_model path traversal
- State
- Published
- Severity
- 4.8 Medium
- Published
- Oct 23, 2026
- Updated
- Oct 26, 2026
- Reserved
- Oct 23, 2026
Description
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/mobile/convertor/__init__.py of the component Convertor. The manipulation of the argument shard_file leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C | VulDB |
| 3.0 | 5.3 Medium | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C | VulDB |
| 2.0 | 4.3 Medium | AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C | VulDB |
Weaknesses
- CWE-22 Path Traversal
Affected Products
| Product | Versions |
|---|---|
mllmUbiquitousLearning |
|
References
- VDB-425982 | UbiquitousLearning mllm Convertor __init__.py load_model path traversalvdb-entrytechnical-description
- VDB-425982 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- CVE-2026-115800 | CVE Analysis and Reportthird-party-advisory
- Submit #1022230 | UbiquitousLearning mllm 2.0.2 (commit bc8f5cdb557f) Path Traversalthird-party-advisory
- https://github.com/UbiquitousLearning/mllm/issues/711issue-tracking
- https://github.com/user-attachments/files/33258553/poc.zipexploit
- https://github.com/UbiquitousLearning/mllm/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.