CVE-2026-116608 is a medium severity vulnerability in DAMO Academy VideoLLaMA2 versions 1.0 and 1.1. It involves improper validation of an integrity check value in the load_pretrained_model function, which can be triggered by manipulating the _name_or_path argument. Remote exploitation is possible, and public exploit details have been disclosed. The vendor has not yet responded or issued a fix.