{"id":"CVE-2026-115802","published":"2026-10-24T07:16:46.273","lastModified":"2026-10-26T13:41:11.497","description":"A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. This manipulation of the argument base_model_name_or_path causes inclusion of functionality from untrusted control sphere. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.","cvssScore":4.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwes":["CWE-829"],"vendors":[],"products":[],"references":[{"url":"https://github.com/InternScience/InternAgent/","tags":[]},{"url":"https://github.com/InternScience/InternAgent/issues/30","tags":[]},{"url":"https://github.com/user-attachments/files/33260564/poc.zip","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-115802","tags":[]},{"url":"https://vuldb.com/submit/1022289","tags":[]},{"url":"https://vuldb.com/vuln/425984","tags":[]},{"url":"https://vuldb.com/vuln/425984/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/InternScience/InternAgent/","tags":[]},{"url":"https://github.com/InternScience/InternAgent/issues/30","tags":[]},{"url":"https://github.com/user-attachments/files/33260564/poc.zip","tags":[]}],"hasPoc":true,"ai":null}