CVE-2026-112140: llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection
A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The exploit has been made public and could be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker must be able to influence the model_lib argument passed to _get_lib_module in python/mlc_chat/chat_module.py. Exploitation can be launched remotely and requires user interaction, but no attacker privileges are required.
Are default deployments known to be affected?
The available information identifies affected code through commit 3f2ffb6c892f13b50a708d05900d3227acb40ded, but does not state whether the vulnerable path is reachable in a default deployment. Assess whether your deployment accepts or forwards untrusted values into model_lib.
Is a fix available?
No updated release or fixed version is provided because the project uses a rolling release model. The project was reportedly notified through an issue report but had not responded at the time of publication.
What can be done if patching is not immediately possible?
Prevent untrusted users or remote inputs from controlling model_lib, and restrict access to interfaces that can invoke _get_lib_module. Review application integrations and configuration paths that supply model library values.
How urgent is remediation?
The issue is rated medium severity with a CVSS score of 6.3, but a public exploit is reported to exist. Prioritize environments where remote users can influence model_lib or where user interaction could cause such a value to be processed.