TI-2026-71516 Aliases CVE-2026-108943 GHSA-j5rm-qfch-8hjp

Code injection in ModelTC LightX2V tokenizer loading

MEDIUM 55CWE-74Published 2026-10-13 · Updated 2026-10-15

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Code execution
Confidentiality · integrity · availability: Low · Low · Low
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.

Summary

ModelTC LightX2V up to 0.5.0 is affected. Manipulating the auto_map argument of AutoTokenizer.from_pretrained in the Tokenizer component causes code injection (CWE-94). An attacker with local access and low privileges can inject code, and no user interaction is needed. A public exploit is linked in the references.

Written with Claude Haiku 5.5 from the sources below · 2026-10-27

Description from the CNA

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py of the component Tokenizer. This manipulation of the argument auto_map causes code injection. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00188 8th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
ModelTC	LightX2V	0.1; 0.2; 0.3; 0.4; 0.5.0	—	No fix listed	CNA

LightX2V VendorModelTC Affected 0.1; 0.2; 0.3; 0.4; 0.5.0 Fixed in — No fix listed CNA

CPE names CNA · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:modeltc:lightx2v::::::::	—	—	ModelTC

cpe:2.3:a:modeltc:lightx2v:*:*:*:*:*:*:*:* Versions — — ·ModelTC

Remediation

The sources list no fixed version for LightX2V.

Written with Claude Haiku 5.5 from the sources below · 2026-10-27

Timeline

2026-10-13 Threatist record created from CVE-2026-108943
2026-10-13 Alias added: GHSA-j5rm-qfch-8hjp
2026-10-16 CISA SSVC decision points changed
2026-10-16 Priority changed: LOW → MEDIUM

References

Exploit 1

https://github.com/ModelTC/LightX2V/issues/1559

Other 1

https://github.com/ModelTC/LightX2V/

TI-2026-65681 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service CVSS 4.0CRITICAL 9.3
TI-2026-65562 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service CVSS 4.0CRITICAL 9.3
TI-2026-65561 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service CVSS 4.0CRITICAL 9.3
TI-2026-63189 LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint CVSS 4.0CRITICAL 9.3
TI-2026-61785 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle Deserialization CVSS 4.0CRITICAL 9.3
TI-2026-21211 LightLLM <= 1.1.0 PD Mode Unsafe Deserialization RCE CVSS 4.0CRITICAL 9.3

See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences