high · CVSS v3 6.3 · CVSS v4 5.3

CVE-2026-112140

A code injection flaw exists in llSourcell Doctor-Dignity's chat module, allowing remote attackers to execute arbitrary code via the model_l

Overview

A code injection flaw exists in llSourcell Doctor-Dignity's chat module, allowing remote attackers to execute arbitrary code via the model_lib argument. The vulnerability is present in all current rolling releases and has been publicly disclosed. Defenders should treat it as a high‑severity risk.

Description

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function _get_lib_module of the file python/mlc_chat/chat_module.py. The manipulation of the argument model_lib results in code injection. The attack may be launched remotely. The exploit has been made public and could be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

Impact

The flaw can compromise confidentiality, integrity, and availability by enabling arbitrary code execution on the host. Attackers can gain full control of the affected system, potentially exfiltrating data or disrupting services. Security teams must consider this a critical threat to any deployed instances.

Remediation

Apply the vendor’s patch as soon as it is released; until then, restrict remote access to the chat module, validate or whitelist model_lib values, run the application in a hardened container, and monitor for suspicious activity. Consider disabling the chat feature if it is not essential.

Risk context

Severity is high with a CVSS v3 score of 6.3. No EPSS data is available, but the public disclosure and lack of a patch warrant prompt action.

Affected products

  • llSourcell Doctor-Dignity

Scores

Severity
high
CVSS v2
7.5
CVSS v3
6.3
CVSS v4
5.3
EPSS
—

code-injection remote-execution Python Doctor-Dignity high-severity input-validation

← All CVEs

Related CVEs

high

CVE-2026-112107

A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument data_offsets causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

View analysis

high

CVE-2026-112102

A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument condition results in code injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

View analysis

high

CVE-2026-112188

MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted. The settings lookup function resolves a dotted setting name to a node in the configuration tree. When a branch name (such as Security, MISP, or Plugin) is supplied instead of a specific leaf setting, the function returns the entire sub-tree. Because a branch node does not carry a redaction flag, the redaction check in the settings retrieval endpoint is bypassed, and the full branch contents are returned to the caller. This exposes sensitive values including the security salt, Redis connection passwords, and plugin API keys. A second endpoint that edits server settings similarly reads the entire configuration store when a branch name is resolved, returning all settings to the caller. The impact is disclosure of sensitive server configuration secrets to any user who can access the server settings endpoints. Affected versions: <2.5.48.

View analysis

high

CVE-2026-64945

A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The question operation controller gates hide/show operations on the wrong permission check result (the unpin permission instead of the hide permission), so in custom role configurations that separate these permissions, a user granted only question.unpin can hide or restore questions without holding question.hide or question.show. Users are recommended to upgrade to version 2.0.3, which fixes the issue.

View analysis