CVE-2026-108943 Details
Description
A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py of the component Tokenizer. This manipulation of the argument auto_map causes code injection. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
A code injection vulnerability has been identified in ModelTC LightX2V versions through 0.5.0. The issue arises in the Tokenizer component, specifically within the function AutoTokenizer.from_pretrained, located in lightx2v/models/runners/cosmos3/cosmos3_runner.py. The vulnerability allows for the execution of arbitrary code by manipulating the auto_map argument, and is limited to local execution. The vulnerability has been publicly disclosed and exploited.
The vulnerability can be remediated by adding a trust_remote_code option to the LightX2V pipeline, which defaults to False and must be explicitly set to True when using trusted model bundles. Additionally, the Cosmos tokenizer should be integrated into the LightX2V package code, rather than relying on model-repository Python.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 13, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/ModelTC/LightX2V/issues/1559 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/ModelTC/LightX2V/ | [email protected] | ProductVendor |
| https://github.com/ModelTC/LightX2V/issues/1559 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://vuldb.com/cve/CVE-2026-108943 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/997679 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/416768 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/416768/cti | [email protected] | AdvisoryContent Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-74 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | [email protected] |
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ModelTC LightX2V | <= 0.5.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 13, 2026 | New CVE Received | [email protected] |