CVE-2026-105135— InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection
Quick assessment
Affected
InternLM MindSearch
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
InternLM MindSearch 0.1.0 中发现一个安全漏洞。该漏洞影响组件“Planner Agent”中文件 的 函数。通过对参数 进行操作，可导致代码注入。攻击者可以从远程发起攻击。该漏洞利用方法已被公开，可能被恶意利用。厂商已在披露早期被联系，但未作任何回应。
Possible ATT&CK Techniques 3 AI
T1203 · Exploitation for Client Execution T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-105135
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| InternLM | MindSearch | 0.1.0 |
cpe:2.3:a:internlm:mindsearch:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-105135
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-105135
请登录查看更多情报信息。
Other References for CVE-2026-105135 (4)
-
https://vuldb.com/cve/CVE-2026-105135 third-party-advisory
-
-
https://vuldb.com/submit/943315 third-party-advisory
IV. Related Vulnerabilities
Same vendor: InternLM
-
CVE-2026-33625
LMDeploy vulnerable to arbitrary code execution via eval() o -
CVE-2025-66455
LMDeploy has Remote Code Execution by Pickle Deserialization -
CVE-2026-92983
InternLM LMDeploy through 0.17.0 Memory Exhaustion via Sessi -
CVE-2026-92971
InternLM LMDeploy through 0.17.0 Assertion Denial of Service -
CVE-2025-59953
LMdeploy has Remote Code Execution by Pickle Deserialization
Same weakness: CWE-94
-
CVE-2026-92084
Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Ar -
CVE-2026-100157
WP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shor -
CVE-2026-103519
WP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Ar -
CVE-2026-100152
All in One SEO <= 5.0.2 - Unauthenticated Arbitrary Shortcod -
CVE-2026-92536
Paid Membership Plugin, Ecommerce, User Registration Form, L
V. Comments for CVE-2026-105135
No comments yet