CVE-2026-116275 | AllenAI AllenNLP up to 2.10.1 Registrable Configuration Machinery registrable.py Registrable.resolve_class_name type code injection

October 25, 2026 Yanac

A vulnerability has been found in AllenAI AllenNLP up to 2.10.1 and classified as critical. This impacts the function Registrable.resolve_class_name of the file allennlp/common/registrable.py of the component Registrable Configuration Machinery. Performing a manipulation of the argument Type results in code injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability was named CVE-2026-116275. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More