CVE-2026-5843

CVE-2026-5843 PoC mlx-lm의 modelfile importlib 실행 경로를 악용하여 악성 모델을 제공하는 최소 OCI 레지스트리입니다. Docker Model Runner가 추론을 위해 모델을 로드할 때 model.py가 호스트에서 로그인한 사용자로 실행됩니다. 요구 사항: Model Runner가 활성화된 Docker Desktop ≤ 4.70.x Apple Silicon 사용법 1. Start the registry on the host python3 poccve20265843.py 2. From any...

CVE-2026-5843 Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the modelfile configuration field in config.json. When a model's config.json specifies a modelfile pointing to a Python...

PT-2026-42831

Name of the Vulnerable Software and Affected Versions Docker Model Runner on macOS affected versions not specified Description The MLX inference backend uses the MLX-LM library, which imports and executes arbitrary Python files from model directories via the model file configuration field in the...