AllenAI CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM AllenAI CVE published 2026-10-26

CVE-2026-116275

A vulnerability was found in AllenAI AllenNLP up to 2.10.1, impacting the Registrable Configuration Machinery in the registrable.py file. The issue allows for code injection through manipulation of the Type argument in the Registrable.resolve_class_name function. This vulnerability can be exploited remotely and has been made public. The affected products are no longer supported by the maintainer.