This vulnerability in modelscope ms-swift (versions 4.0, 4.1, and 4.2.0) arises from the use of a weak hash algorithm in the Template._save_pil_image function located in swift/template/base.py. The weakness affects the PIL Image Cache Key Handler component, potentially allowing an attacker with local access to exploit the issue. The attack complexity is high, and no privileges are elevated or user interaction required. Although the exploit has been publicly disclosed, no official patch or remediation has been released yet; a pull request addressing the issue is pending acceptance.

The impact is limited due to the requirement for local access and the high complexity of exploitation. The vulnerability involves weak hashing, which could affect the integrity or caching mechanisms related to PIL images within the application. There is no indication of privilege escalation, remote exploitation, or significant confidentiality, integrity, or availability impact based on the available data.

No official fix or patch is currently available. A pull request to address the vulnerability has been submitted but not yet accepted. Users should monitor the vendor's repository or advisory channels for the acceptance of the fix and apply it once available. Until then, limiting local access to trusted users may reduce risk.