MediumVulnerabilityLLM-specific
CVE-2026-122160: myshell-ai AIlice HuggingFace Model Wrapper untrusted model loading
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-122160
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
A vulnerability in myshell-ai AIlice up to 0.4.0 affects the function LoadModel_PEFT in ailice/core/llm/AModelCausalLM.py, within the HuggingFace Model Wrapper component. Manipulating the argument base_model_name_or_path leads to inclusion of functionality from an untrusted control sphere, and the attack can be launched remotely. The exploit is public, and the project was informed through an issue report but has not responded.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-122159: Edge0-AI Audio8_TTS path traversal via slow_decode_models argumentSimilar attack · NVD/CVE Database
- MediumCVE-2026-122235: Jan workspace guard bypass allows file writes outside workspace via symlinksSimilar attack · NVD/CVE Database
- HighCVE-2026-122135: Mistral Vibe remote code execution via repository gpg.program settingSimilar attack · NVD/CVE Database
- HighCVE-2026-122134: Mistral Vibe remote code execution through malicious Git filter driversSimilar attack · NVD/CVE Database
- HighCVE-2026-122133: Mistral Vibe untrusted search path code execution via git.exe on WindowsSimilar attack · NVD/CVE Database