PT-2026-46861

Published

2026-05-19

·

Updated

2026-05-19

Description by

CVSS 3.1
7.3
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration file (dey mini.yaml) under the key ['nnet']['module'].
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
GHSA-FHHQ-H4HG-549X
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com