CVE-2026-108943

5.3Medium

Published 13 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

5.3Medium

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Limited impact
Weakness: CWE-74, CWE-94

Impact

Local attackers can execute arbitrary code on the system with public exploit code already available. They need local access to pass malicious arguments to the tokenizer loader.

Root cause

Improper sanitization of the auto_map argument in AutoTokenizer.from_pretrained enables code injection during tokenizer initialization.

Affected systems

ModelTC LightX2V up to 0.5.0

CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Fix & remediation

No fixed version is currently available as the vendor has not responded. Block untrusted local input from reaching lightx2v/models/runners/cosmos3/cosmos3_runner.py, or restrict execution environments until an upstream patch is released.

shell

$ python3 -c "import lightx2v; print(lightx2v.__version__)"

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py of the component Tokenizer. This manipulation of the argument auto_map causes code injection. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-108943