CVE-2026-108943: ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection

Q: Who can exploit this issue?

Exploitation is restricted to local execution. An attacker needs local access with the ability to manipulate the auto_map argument used by AutoTokenizer.from_pretrained.

Q: Which installations should be considered vulnerable?

ModelTC LightX2V versions up to and including 0.5.0 are affected. The vulnerable code is in lightx2v/models/runners/cosmos3/cosmos3_runner.py, in its use of AutoTokenizer.from_pretrained.

Q: Is a fix available?

The available information does not identify a fixed version. The project was notified through an issue report but had not responded at the time of publication.

Q: How can I assess exposure while no fix is identified?

Identify LightX2V deployments at version 0.5.0 or earlier and determine whether local users or processes can influence the auto_map value reaching the Cosmos3 runner's AutoTokenizer.from_pretrained call. Restrict local access and prevent untrusted modification of that input path where possible.

Published Oct 13, 2026

Updated

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Affected Software

1 affected component

ModelTC LightX2V<=0.5.0

Event History

Oct 13, 2026

CVE Published

via MITRE·12:15 AM

Data Sourced

via MITRE·12:15 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

Exploitation is restricted to local execution. An attacker needs local access with the ability to manipulate the auto_map argument used by AutoTokenizer.from_pretrained.

Which installations should be considered vulnerable?

ModelTC LightX2V versions up to and including 0.5.0 are affected. The vulnerable code is in lightx2v/models/runners/cosmos3/cosmos3_runner.py, in its use of AutoTokenizer.from_pretrained.

Is a fix available?

The available information does not identify a fixed version. The project was notified through an issue report but had not responded at the time of publication.

How can I assess exposure while no fix is identified?

Identify LightX2V deployments at version 0.5.0 or earlier and determine whether local users or processes can influence the auto_map value reaching the Cosmos3 runner's AutoTokenizer.from_pretrained call. Restrict local access and prevent untrusted modification of that input path where possible.

CVE-2026-108943: ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which installations should be considered vulnerable?

Is a fix available?

How can I assess exposure while no fix is identified?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which installations should be considered vulnerable?

Is a fix available?

How can I assess exposure while no fix is identified?