CVE-2026-122160

A flaw was found in AIlice. The Hugging Face model wrapper fails to properly restrict or validate model paths within the LoadModelPEFT function. A remote attacker could exploit this vulnerability by supplying a manipulated model path, causing the application to load and execute untrusted external...