EUVD-2026-109158

A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function loadmodel of the file pymllm/mobile/convertor/init.py of the component Convertor. The manipulation of the argument shardfile leads to path traversal. The attack needs to be performed locall...

CVE-2026-115800

A path traversal vulnerability exists in UbiquitousLearning mllm versions up to 2.0.2 . The flaw is located in the load_model function within the pymllm/mobile/convertor/__init__.py file of the Convertor component. By manipulating the shard_file argument, a local attacker can perform path travers...