CVE-2026-111212

MEDIUM 4.8

ImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection

CVSS Score

4.8

EPSS Score

0.0%

EPSS Percentile

0th

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.get_modelmeta.custom_metadata_map of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt_shape results in improper neutralization of directives in dynamically evaluated code. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-95 CWE-94
Vendor	imprintlab
Product	medical-sam-adapter
Published	Oct 16, 2026

Stay Ahead of the Next One

Get instant alerts for imprintlab medical-sam-adapter

Be the first to know when new medium vulnerabilities affecting imprintlab medical-sam-adapter are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

ImprintLab / Medical-SAM-Adapter

0.1.0 0.1.0-alpha

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/420763 vuldb.com: https://vuldb.com/vuln/420763/cti vuldb.com: https://vuldb.com/cve/CVE-2026-111212 vuldb.com: https://vuldb.com/submit/1004881 github.com: https://github.com/ImprintLab/Medical-SAM-Adapter/issues/145 github.com: https://github.com/ImprintLab/Medical-SAM-Adapter/

Credits

🔍 Dem00000 (VulDB User) VulDB CNA Team