Internlm - Mindsearch - CRITICAL - CVE-2026-105135. A code injection vulnerability exists in InternLM MindSearch version 0.1.0, specifically within the ExecutionAction.run function located in the mindsearch/agent/graph.py file. This vulnerability allows attackers to manipulate input arguments, leading to remote code execution. The potential exploit has been publicly disclosed, and despite early communication with the vendor regarding the issue, there has been no response. It's crucial for users of this software to implement necessary security measures to mitigate the risk of exploitation. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io