CVE-2026-10801 json
modelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hash
published 2026-06-04 5 mo ago modified 2026-07-23 3 mo ago also GHSA-prfw-69r3-wqxf , PYSEC-2026-3488 , EUVD-2026-34242
- cvss
- 3.6
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.1%
- EPSS 0.1% chance of exploitation in 30 days, percentile 0%
- public exploits
- 0
- none known
Summary
A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template._save_pil_image of the file swift/template/base.py of the component PIL Image Cache Key Handler. The manipulation leads to use of weak hash. An attack has to be approached locally. A high degree of complexity is needed for the attack. It is indicated that the exploitability is difficult. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.
Patch / fix
- github.com/modelscope/ms-swift@27426a6 commit
- github.com/modelscope/ms-swift#9359 pull request
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 5 mo ago
Exploit prediction
0.07% chance of exploitation in the next 30 days, higher than 0% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- github.com https://github.com/modelscope/ms-swift/issues/9360 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 2.0 | CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| CNA | 3.1 | 3.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R |
| CNA | 3.0 | 3.6 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R |
| CNA | 2.0 | 2.4 | AV:L/AC:H/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR |
| CNA | 4.0 | 1.1 | CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CNA | 3.1 | 3.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L |
| CNA | 2.0 | 2.4 | AV:L/AC:H/Au:S/C:N/I:P/A:P |
| OSV | 3.1 | 3.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L |
| GitHub | 3.1 | 3.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | ms-swift | <=4.2.0 |
no fix listed |
Affected products
- modelscope ms-swift
Classification
References
-
github.com
/modelscope/ms-swift/pull/9359
issue-tracking, patch, web
-
github.com
/modelscope/ms-swift/commit/27426a6431759a82e2a1c98344b425f90be17e07
web
-
github.com
/modelscope/ms-swift/issues/9360
exploit, issue-tracking, web
-
vuldb.com
/vuln/368250
vdb-entry, technical-description, web
-
vuldb.com
/vuln/368250/cti
signature, permissions-required, web
-
vuldb.com
/cve/CVE-2026-10801
third-party-advisory, web
-
vuldb.com
/submit/831455
third-party-advisory, web
-
vuldb.com
/submit/831456
third-party-advisory, web
-
github.com
/modelscope/ms-swift/
product
-
nvd.nist.gov
/vuln/detail/CVE-2026-10801
advisory
-
github.com
/modelscope/ms-swift
package
-
pypi.org
/project/ms-swift
package
-
github.com
/advisories/GHSA-prfw-69r3-wqxf
advisory
Sources
- CVE List CVE-2026-10801
- GitHub Advisory GHSA-prfw-69r3-wqxf
- NVD CVE-2026-10801
- OSV PYSEC-2026-3488
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.