Description
A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_text_config of the file tinyllava/model/configuration_tinyllava.py of the component TinyLlavaConfig. Performing a manipulation of the argument llm_model_name_or_path results in code injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-13
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Patch Now
AI Analysis

Impact

A code injection flaw exists in the _load_text_config function of TinyLLaVA TinyLLaVA_Factory, where an attacker can manipulate the llm_model_name_or_path argument to execute arbitrary code. The vulnerability aligns with CWE-74 (Command Injection) and CWE-94 (Dynamic Code Execution). Remote exploitation is possible, and an exploit has already been released to the public. The flaw can allow attackers to run arbitrary commands on the host system or gain full control of the application.

Affected Systems

The flaw affects all releases of TinyLLaVA TinyLLaVA_Factory up to the commit 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. Because the project uses a rolling release model, the exact version numbers for the vulnerable and patched releases are not documented, but any codebase that includes the unpatched _load_text_config function is vulnerable.

Risk and Exploitability

The CVSS score of 5.3 indicates moderate severity. The EPSS score is not available, so exploitation probability is unknown, but the vulnerability is publicly known and no Mitigations are listed in the CISA KEV catalog. Remote exploitation is feasible by sending a crafted llm_model_name_or_path value, allowing an attacker to inject shell commands or Python code into the configuration loader. Given the public release of the exploit, the risk to systems running this software is significant until a fix is applied.

Generated by OpenCVE AI on October 13, 2026 at 03:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to the latest version of TinyLLaVA_Factory that includes the vendor‑supplied patch for the injection flaw.
  • If an updated release is not yet available, immediately modify or remove the _load_text_config logic that accepts external model paths, or replace it with a safe wrapper that validates the input against an allowlist.
  • Implement strict input sanitization for llm_model_name_or_path: strip or reject characters that could be interpreted as part of a command or code string, and enforce a whitelist of known model names or absolute paths.

Generated by OpenCVE AI on October 13, 2026 at 03:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 02:45:00 +0000

Type Values Removed Values Added
Description A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_text_config of the file tinyllava/model/configuration_tinyllava.py of the component TinyLlavaConfig. Performing a manipulation of the argument llm_model_name_or_path results in code injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
Title TinyLLaVA TinyLLaVA_Factory TinyLlavaConfig configuration_tinyllava.py _load_text_config code injection
First Time appeared Tinyllava
Tinyllava tinyllava Factory
Weaknesses CWE-74
CWE-94
CPEs cpe:2.3:a:tinyllava:tinyllava_factory:*:*:*:*:*:*:*:*
Vendors & Products Tinyllava
Tinyllava tinyllava Factory
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Tinyllava Tinyllava Factory
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-15T14:58:01.099Z

Reserved: 2026-10-11T19:20:05.995Z

Link: CVE-2026-108957

cve-icon Vulnrichment

Updated: 2026-10-15T14:57:55.889Z

cve-icon NVD

Status : Deferred

Published: 2026-10-13T03:16:40.193

Modified: 2026-10-13T13:29:12.567

Link: CVE-2026-108957

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T07:23:37Z

Weaknesses
  • CWE-74

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

  • CWE-94

    Improper Control of Generation of Code ('Code Injection')