CVE-2026-115802 | InternScience InternAgent 1.5.0 LoRA Loading experiment.py train base_model_name_or_path inclusion of functionality from untrusted control sphere (Issue 30)

October 23, 2026 Yanac

A vulnerability was found in InternScience InternAgent 1.5.0. It has been classified as problematic. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. This manipulation of the argument base_model_name_or_path causes inclusion of functionality from untrusted control sphere.

This vulnerability appears as CVE-2026-115802. The attack may be initiated remotely. In addition, an exploit is available.VulDB Recent EntriesRead More