CVE-2026-122014

A flaw was found in npcpy. An input validation vulnerability in the model loading component allows a remote attacker to execute arbitrary code. By supplying a specially crafted model name or path parameter, an attacker can inject and execute unintended commands within the application's runtime...