CVE-2026-108957
Received Received - Intake

Code Injection in TinyLLaVA TinyLlavaConfig

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: VulDB

Description
A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_text_config of the file tinyllava/model/configuration_tinyllava.py of the component TinyLlavaConfig. Performing a manipulation of the argument llm_model_name_or_path results in code injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-108957
EUVD
EUVD-2026-98266

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
TinyLLaVA TinyLLaVA_Factory 1abc6ac5e76a68d0fd087a071b56da968e69ca9b

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-108957 is a code injection vulnerability in TinyLLaVA TinyLLaVA_Factory. It occurs in the _load_text_config function of tinyllava/model/configuration_tinyllava.py where manipulating the llm_model_name_or_path argument allows remote code execution. The flaw stems from a hardcoded trust_remote_code=True setting that enables malicious Python code execution during configuration parsing.

Detection Guidance

Check for unusual Python code execution in logs or processes related to TinyLLaVA_Factory. Inspect configuration files for hardcoded trust_remote_code=True settings in TinyLlavaConfig._load_text_config(). Monitor network traffic for unexpected outbound connections from the application.

Impact Analysis

This vulnerability allows attackers to execute arbitrary code on systems running affected versions of TinyLLaVA_Factory. Since the exploit can occur during model configuration loading, attackers could gain control over the system with the privileges of the user running the application. Public exploits exist, increasing the risk of real-world attacks.

Compliance Impact

This vulnerability could lead to unauthorized code execution, potentially compromising data confidentiality and integrity. For GDPR, it may result in unauthorized access to personal data. For HIPAA, it could expose protected health information. Organizations using this framework may face compliance violations and regulatory penalties.

Mitigation Strategies

Remove the hardcoded trust_remote_code=True setting in TinyLlavaConfig._load_text_config() and ensure explicit user consent is required for remote code execution. Monitor the project's repository for updates and patches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108957. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart