InternLM MindSearch 0.1.0 faces CRITICAL code injection (CVE-2026-105135). Remote attackers can run arbitrary code — no patch yet. Restrict access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-105135-code-injection-in-internlm-mindsearch-f0d6fc8a61cd76d9 #OffSeq #CVE202610513...
@offseq.bsky.social