This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-122014 | BDVDB-2026-400397 Detail

NPC-Worldwidenpcpy

Description#

A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function load_sft_model of the file npcpy/ft/sft.py. The manipulation of the argument base_model_name_or_path leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-94 Improper Control of Generation of Code ('Code Injection')
  • CWE-74 Injection

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.