CVE-2026-111212 | CVSS: 4.8 | 严重级别: MEDIUM
A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.get_modelmeta.custom_metadata_map of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt_shape results in improper neutralization of directives in dynamically evaluated code. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has n
参考链接:
• https://github.com/ImprintLab/Medical-SAM-Adapter/
• https://github.com/ImprintLab/Medical-SAM-Adapter/issues/145
• https://vuldb.com/cve/CVE-2026-111212
📌 数据来源: NVD 官方