PT-2026-137148

A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function load sft model of the file npcpy/ft/sft.py. The manipulation of the argument base model name or path leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the...