6 matches found
CVE-2026-105135
A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit...
CVE-2026-105135 InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection
A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit...
CVE-2026-105135 InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection
A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit...
EUVD-2026-92077
A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit...
CVE-2026-105135
The InternLM MindSearch software (version 0.1.0 ) contains a code injection vulnerability within the Planner Agent component. Specifically, the ExecutionAction.run function in the file mindsearch/agent/graph.py is affected. The root cause is the improper handling of argument inputs , which allows...
CVE-2026-105135: Improper Control of Generation of Code
A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit...