CVE-2026-115800
UbiquitousLearning mllm Convertor __init__.py load_model path traversal
Fetching some sources has been requested. Reload in about a minute to see them.
CVSS v3.1 (listed by NVD)
5.3
MEDIUM
Scored by vuldb.com (not yet scored by NVD)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0 (listed by NVD)
1.9
LOW
Scored by vuldb.com (not yet scored by NVD)
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS (listed by CVE.org)
4.8
MEDIUM
Scored by CNA (VulDB) · v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS exploit probability
0.2%
Percentile 6.3%
as of 2026-10-24
CISA KEV
—
Not listed
Attack conditions and impact
Derived from the CNA (via NVD) CVSS 3.1 vector
LocalLoginNo interaction
PoC
Confidentiality LIntegrity LAvailability L
| Metric | Value | Meaning |
|---|---|---|
| Attack vector AV | L | Local |
| Attack complexity AC | L | Low (easy) |
| Privileges required PR | L | Regular user |
| User interaction UI | N | None |
| Scope S | U | Unchanged |
| Confidentiality C | L | Low |
| Integrity I | L | Low |
| Availability A | L | Low |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
NVD
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/mobile/convertor/__init__.py of the component Convertor. The manipulation of the argument shard_file leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS assessments
| Provider | Version | Score | Vector |
|---|---|---|---|
| NVD / [email protected] (Secondary) | 4.0 | 1.9 LOW | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| NVD / [email protected] (Primary) | 3.1 | 5.3 MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| NVD / [email protected] (Secondary) | 2.0 | 4.3 MEDIUM | AV:L/AC:L/Au:S/C:P/I:P/A:P |
| CNA / VulDB | 4.0 | 4.8 MEDIUM | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| CNA / VulDB | 3.1 | 5.3 MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C |
| CNA / VulDB | 3.0 | 5.3 MEDIUM | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C |
| CNA / VulDB | 2.0 | 4.3 | AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C |
Affected products and packages
CNA (CVE.org)
| Vendor | Product | Versions |
|---|---|---|
| UbiquitousLearning | mllm | affected: 2.0.0 affected: 2.0.1 affected: 2.0.2 |
Linux distribution status
References (7)
- https://github.com/UbiquitousLearning/mllm/ NVD, CNA product
- https://github.com/UbiquitousLearning/mllm/issues/711 NVD, CNA issue-tracking
- https://github.com/user-attachments/files/33258553/poc.zip NVD, CNA exploit
- https://vuldb.com/cve/CVE-2026-115800 NVD, CNA third-party-advisory
- https://vuldb.com/submit/1022230 NVD, CNA third-party-advisory
- https://vuldb.com/vuln/425982 NVD, CNA vdb-entrytechnical-description
- https://vuldb.com/vuln/425982/cti NVD, CNA signaturepermissions-required