CVE-2026-116608

Name of the Vulnerable Software and Affected Versions DAMO Academy VideoLLaMA2 versions prior to 1.2

Description An issue exists in the Model Loading component within the load pretrained model() function located in the videollama2/model/ init .py file. Improper validation of the integrity check value occurs when the name or path argument is manipulated, allowing for remote exploitation.

Recommendations As a temporary workaround, restrict the use of the load pretrained model() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.