CVE-2026-10801
Last modified
CVE-2026-10801 is a low-severity vulnerability rated 3.6/10 on the CVSS scale. A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template._save_pil_image of the file swift/template/base.py of the component PIL Image Cache Key Handler. EPSS estimates a 0.07% chance of exploitation in the next 30 days.
Description
A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template._save_pil_image of the file swift/template/base.py of the component PIL Image Cache Key Handler. The manipulation leads to use of weak hash. An attack has to be approached locally. A high degree of complexity is needed for the attack. It is indicated that the exploitability is difficult. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.
Metrics
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-10801?
How severe is CVE-2026-10801?
How do I fix CVE-2026-10801?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-10789A maliciously crafted webpage, when visited by a user with A…9.6
- CVE-2026-1079A native messaging host vulnerability in Pega Browser Extens…6
- CVE-2026-10795The UpdraftPlus: WP Backup & Migration Plugin plugin for Wor…8.1
- CVE-2026-10796nvm (Node Version Manager) through 0.40.4 executes arbitrary…7.5
- CVE-2026-1080GitLab has remediated an issue in GitLab EE affecting all ve…4.3
- CVE-2026-10800A weakness has been identified in PaddlePaddle FastDeploy up…3.6
- CVE-2026-10802A vulnerability was detected in keystonejs keystone up to 20…4.3
- CVE-2026-10803A flaw has been found in MLflow up to 3.10.0. This issue aff…3.6
- CVE-2026-10804A vulnerability has been found in Streamlit up to 1.53.0. Im…4.7
- CVE-2026-10805A flaw was found in NetworkManager. This local privilege esc…6.7
- CVE-2026-10806A vulnerability was found in mjperpinosa stumasy. The affect…6.3
- CVE-2026-10807A vulnerability was determined in mjperpinosa stumasy. The i…6.3
Are you affected by CVE-2026-10801?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST