PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-108957 TinyLLaVA CVE debrief

A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_text_config of the file tinyllava/model/configuration_tinyllava.py of the component TinyLlavaConfig. Performing a manipulation of the argument llm_model_name_or_path results in code injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

Vendor
TinyLLaVA
Product
TinyLLaVA_Factory
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-13
Original CVE updated
2026-10-13
Advisory published
2026-10-13
Advisory updated
2026-10-13

Who should care

Defenders responsible for TinyLLaVA_Factory deployments should assess exposure and prioritize verification and patching to prevent code injection attacks. This includes reviewing the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. Additionally, defenders should plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Why it matters

Defenders should prioritize verifying the affected version and applying patches or mitigations to prevent code injection attacks. The vulnerability allows for remote exploitation, and the exploit has been released to the public. However, specific versions and remediation steps require verification from the supplied official sources.

  • Verify and patch affected TinyLLaVA_Factory deployments to prevent code injection
  • Monitor for public exploits and adjust defensive priorities accordingly
  • Assess exposure and prioritize verification and patching

Technical summary

The vulnerability is located in the _load_text_config function of the tinyllava/model/configuration_tinyllava.py file, which is part of the TinyLlavaConfig component. An attacker can inject code by manipulating the llm_model_name_or_path argument, allowing for remote exploitation. Defenders should prioritize verifying the affected version and applying patches or mitigations to prevent code injection attacks. The CVE record and source item provide details about the vulnerability, including the affected component, attack vector, and potential impact.

Defensive priority

Defenders should prioritize verifying the affected version and applying patches or mitigations to prevent code injection attacks.

Recommended defensive actions

  • Verify the affected version of TinyLLaVA_Factory and identify potential exposure
  • Apply patches or mitigations to prevent code injection attacks
  • Monitor for public exploits and adjust defensive priorities accordingly
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details about the vulnerability, including the affected component, attack vector, and potential impact. However, the corpus does not establish specific versions or remediation steps, which requires verification from the supplied official sources.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-108957 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-108957

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-108957 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-108957

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • TinyLLaVA TinyLLaVA_Factory TinyLlavaConfig configuration_tinyllava.py _load_text_config code in

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108957.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/416776

    Supplemental source - vdb-entry, technical-description

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/416776/cti

    Supplemental source - signature, permissions-required

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/cve/CVE-2026-108957

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/submit/997884

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://github.com/TinyLLaVA/TinyLLaVA_Factory/issues/212

    Supplemental source - exploit, issue-tracking

  • Source reference

    Unverified legacy reference

    URL: https://github.com/TinyLLaVA/TinyLLaVA_Factory/

    Supplemental source - product

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.