TLP:CLEARReceivedPublished 24 Oct 2026 · Updated 24 Oct 2026
CVE-2026-115802
2.1LowCVSS 4.0
A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. This manipulation of the argument base_model_name_or_path causes inclusion of functionality from untrusted control sphere. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
- Affected software
- InternScience InternAgent
- Versions
- 1.5.0
- Weakness
- CWE-829
- Assigned by
- VulDB
- NVD status
- Received
ReferencesNVD https://nvd.nist.gov/vuln/detail/CVE-2026-115802 CVE.org https://www.cve.org/CVERecord?id=CVE-2026-115802 https://github.com/InternScience/InternAgent/ https://github.com/InternScience/InternAgent/issues/30 https://github.com/user-attachments/files/33260564/poc.zip https://vuldb.com/cve/CVE-2026-115802 https://vuldb.com/submit/1022289