CVE-2026-122014 in npcpy
Prediction
by VulDB Data Team • 11/04/2026
A vulnerability has been found in <a href="/product/npc-worldwide:npcpy">NPC-Worldwide npcpy up to 2.1.27</a>. This affects the function <code>load_sft_model</code> of the file <em>npcpy/ft/sft.py</em>. The manipulation of the argument <em>base_model_name_or_path</em> leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.