CVE-2026-122015 | NPC-Worldwide npcpy up to 2.1.27 MLX Provider npcpy/gen/response.py get_mlx_response model input validation (Issue 309)

November 4, 2026 Yanac

A vulnerability categorized as critical has been discovered in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get_mlx_response of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in improper input validation.

This vulnerability is reported as CVE-2026-122015. The attack can be launched remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More