GHSA-cgw3-x9m5-7cc6LowCVSS 4.3
A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function...
🔗 CVE IDs covered (1)
📋 Description
A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. This manipulation of the argument base_model_name_or_path causes inclusion of functionality from untrusted control sphere. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
🔗 References (9)
- https://nvd.nist.gov/vuln/detail/CVE-2026-115802
- https://github.com/InternScience/InternAgent/issues/30
- https://github.com/InternScience/InternAgent
- https://github.com/user-attachments/files/33260564/poc.zip
- https://vuldb.com/cve/CVE-2026-115802
- https://vuldb.com/submit/1022289
- https://vuldb.com/vuln/425984
- https://vuldb.com/vuln/425984/cti
- https://github.com/advisories/GHSA-cgw3-x9m5-7cc6