Read the docs
TI-2026-85211 Aliases CVE-2026-122015GHSA-7hq8-9q58-v935

Improper input validation in NPC-Worldwide npcpy MLX provider

Priority LOW 24CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

NPC-Worldwide npcpy versions up to 2.1.27 contain an input validation flaw in the MLX Provider. The model argument passed to get_mlx_response in npcpy/gen/response.py is not properly validated (CWE-20). A remote attacker can trigger it without privileges, with limited effect on confidentiality, integrity and availability. A public exploit has been released.

Written with Claude Haiku 5.5 from the sources below · 2026-11-05

Description from the CNA

A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get_mlx_response of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in improper input validation. The attack can be launched remotely. The exploit has been made public and could be used.

Why it matters now

EPSS 0.00312 24th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
NPC-Worldwidenpcpy2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.1.4; 2.1.5; 2.1.6; 2.1.7; 2.1.8; 2.1.9; 2.1.10; 2.1.11; 2.1.12; 2.1.13; 2.1.14; 2.1.15; 2.1.16; 2.1.17; 2.1.18; 2.1.19; 2.1.20; 2.1.21; 2.1.22; 2.1.23; 2.1.24; 2.1.25; 2.1.26; 2.1.27—No fix listedCNA
  • npcpy VendorNPC-Worldwide Affected 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.1.4; 2.1.5; 2.1.6; 2.1.7; 2.1.8; 2.1.9; 2.1.10; 2.1.11; 2.1.12; 2.1.13; 2.1.14; 2.1.15; 2.1.16; 2.1.17; 2.1.18; 2.1.19; 2.1.20; 2.1.21; 2.1.22; 2.1.23; 2.1.24; 2.1.25; 2.1.26; 2.1.27 Fixed in — No fix listed CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:npc-worldwide:npcpy:*:*:*:*:*:*:*:*———
  • cpe:2.3:a:npc-worldwide:npcpy:*:*:*:*:*:*:*:* Versions — — ·—

Remediation

The sources list no fixed version for npcpy.

Written with Claude Haiku 5.5 from the sources below · 2026-11-05

Timeline

  1. 2026-11-04 Threatist record created from CVE-2026-122015
  2. 2026-11-05 Alias added: GHSA-7hq8-9q58-v935

References

Exploit 1

Other 2

  • TI-2026-85201 Code injection in NPC-Worldwide npcpy via load_sft_model CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences