CVE-2026-115802
InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphere
- State
- Published
- Severity
- 5.3 Medium
- Published
- Oct 24, 2026
- Updated
- Oct 29, 2026
- Reserved
- Oct 23, 2026
Description
A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. This manipulation of the argument base_model_name_or_path causes inclusion of functionality from untrusted control sphere. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:C | VulDB |
Weaknesses
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere
Affected Products
| Product | Versions |
|---|---|
InternAgentInternScience |
|
References
- VDB-425984 | InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control spherevdb-entrytechnical-description
- VDB-425984 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- CVE-2026-115802 | CVE Analysis and Reportthird-party-advisory
- Submit #1022289 | InternScience InternAgent commit fa8c3eedfa9751d3752ea6eb49220b303ac2397d (main HEAD as of 2026-07-29) Improper Input Validationthird-party-advisory
- https://github.com/InternScience/InternAgent/issues/30issue-tracking
- https://github.com/user-attachments/files/33260564/poc.zipexploit
- https://github.com/InternScience/InternAgent/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.