CVE-2026-122160

MediumCVSS 6.3/10Last modified Nov 5, 2026

Description

A security vulnerability has been detected in myshell-ai AIlice up to 0.4.0. This vulnerability affects the function LoadModel_PEFT of the file ailice/core/llm/AModelCausalLM.py of the component HuggingFace Model Wrapper. The manipulation of the argument base_model_name_or_path leads to inclusion of functionality from untrusted control sphere. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-829

Affected software

Vendor	Product	Versions
myshell-ai	AIlice	0.1; 0.2; 0.3; 0.4.0

References

Timeline

Published: Nov 5, 2026
Last modified: Nov 5, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-1221625.5Integer underflow (wrap or wraparound) in Windows Update Stack allows an authorized attacker to disclose information locally.CVE-2026-1221637.5Double free in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.CVE-2026-1221648.0Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network.CVE-2026-1221657.8Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.CVE-2026-1221667.8Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.CVE-2026-1221676.8Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-1221687.8Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.CVE-2026-1221697.5Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally.CVE-2026-122177.8A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of t CVE-2026-1221707.0Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.CVE-2026-1221718.8Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.CVE-2026-1221727.8Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.