Description
A security vulnerability has been detected in myshell-ai AIlice up to 0.4.0. This vulnerability affects the function LoadModel_PEFT of the file ailice/core/llm/AModelCausalLM.py of the component HuggingFace Model Wrapper. The manipulation of the argument base_model_name_or_path leads to inclusion of functionality from untrusted control sphere. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-11-05
Score: 5.3 Medium
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Assess Impact
AI Analysis

Impact

The vulnerability is in the LoadModel_PEFT function within the AModelCausalLM.py module of the AIlice HuggingFace Model Wrapper. By manipulating the base_model_name_or_path argument, an attacker can cause the wrapper to load functionality from an untrusted control sphere. This enables remote code execution, compromising confidentiality, integrity, and availability of the host system. The weakness aligns with CWE‑829, which covers improper restriction of capabilities.

Affected Systems

The issue affects all versions of myshell‑ai AIlice up to and including 0.4.0. Any installation that uses the LoadModel_PEFT function with that code base is potentially vulnerable. The problem is present in the AIlice repository hosted on GitHub and was reported in issue 77. Users of earlier releases should verify if they have applied any subsequent commits that fix the issue.

Risk and Exploitability

The CVSS score of 5.3 indicates a moderate severity, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote, as an attacker can supply a crafted base_model_name_or_path value when calling LoadModel_PEFT. No additional conditions are required beyond normal usage of the function, making exploitation relatively straightforward. Organizations should consider the risk of remote code execution until an official fix is released.

Generated by OpenCVE AI on November 5, 2026 at 03:22 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Restrict the base_model_name_or_path parameter to a whitelist of approved model directories or sign‑verified packages, rejecting any other input.
  • Validate the integrity and existence of the specified model repository before loading, and reject any that are not authenticated or verified.
  • Until an official patch is available, disable or remove the LoadModel_PEFT function from production or upgrade to a later version of AIlice that addresses the vulnerability.

Generated by OpenCVE AI on November 5, 2026 at 03:22 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 05 Nov 2026 02:45:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in myshell-ai AIlice up to 0.4.0. This vulnerability affects the function LoadModel_PEFT of the file ailice/core/llm/AModelCausalLM.py of the component HuggingFace Model Wrapper. The manipulation of the argument base_model_name_or_path leads to inclusion of functionality from untrusted control sphere. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Title myshell-ai AIlice HuggingFace Model Wrapper AModelCausalLM.py LoadModel_PEFT inclusion of functionality from untrusted control sphere
First Time appeared Myshell-ai
Myshell-ai ailice
Weaknesses CWE-829
CPEs cpe:2.3:a:myshell-ai:ailice:*:*:*:*:*:*:*:*
Vendors & Products Myshell-ai
Myshell-ai ailice
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Myshell-ai Ailice
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-11-05T02:30:27.957Z

Reserved: 2026-11-04T18:53:20.771Z

Link: CVE-2026-122160

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-11-05T03:17:21.133

Modified: 2026-11-05T03:17:21.310

Link: CVE-2026-122160

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-05T03:30:14Z

Weaknesses
  • CWE-829

    Inclusion of Functionality from Untrusted Control Sphere