CVE-2026-115800 in mllm
Prediction
by VulDB Data Team • 10/23/2026
A vulnerability was identified in <a href="/product/ubiquitouslearning:mllm">UbiquitousLearning mllm up to 2.0.2</a>. The affected element is the function <code>load_model</code> of the file <em>pymllm/mobile/convertor/__init__.py</em> of the component <em>Convertor</em>. The manipulation of the argument <em>shard_file</em> leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.