CVE-2026-116275

A code injection vulnerability exists in AllenAI AllenNLP up to version 2.10.1 . The flaw is located in the Registrable Configuration Machinery component, specifically within the Registrable.resolve_class_name function in allennlp/common/registrable.py. By manipulating the Type argument, an attac...

CVE-2026-116275 AllenAI AllenNLP Registrable Configuration Machinery registrable.py Registrable.resolve_class_name code injection

A vulnerability was found in AllenAI AllenNLP up to 2.10.1. This impacts the function Registrable.resolveclassname of the file allennlp/common/registrable.py of the component Registrable Configuration Machinery. Performing a manipulation of the argument Type results in code injection. The attack...