Threat database

CVE-2026-111212 is a low-severity vulnerability in ImprintLab Medical-SAM-Adapter versions 0.1.0 and 0.1.0-alpha. It involves improper neutralization of directives in dynamically evaluated code within the session.get_modelmeta.custom_metadata_map function. The flaw arises from manipulation of the imgsz, names, or kpt_shape arguments, allowing local attackers to influence code execution. The vulnerability requires local access and user interaction to exploit. Although exploit code has been publicly released, no known exploitation in the wild has been reported. The vendor has not yet responded or provided a fix.