CVE-2026-5843

CVE-2026-5843 PoC Registry OCI minimale che serve un modello dannoso per sfruttare il percorso di esecuzione importlib di modelfile in mlx-lm. Quando Docker Model Runner carica il modello per l'inferenza, model.py viene eseguito sull'host come utente connesso. Richiede: Docker Desktop ≤ 4.70.x...

CVE-2026-5843 Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the modelfile configuration field in config.json. When a model's config.json specifies a modelfile pointing to a Python...

PT-2026-42831

Name of the Vulnerable Software and Affected Versions Docker Model Runner on macOS affected versions not specified Description The MLX inference backend uses the MLX-LM library, which imports and executes arbitrary Python files from model directories via the model file configuration field in the...