CVE-2026-90777 PUBLISHED

ESPnet before 202609 Remote Code Execution via Unsafe Deserialization

Assigner: VulnCheck
Reserved: 13.09.2026 Published: 13.09.2026 Updated: 13.09.2026

ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or fine-tuning path.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 8.7

Product Status

Vendor espnet
Product espnet
Versions Default: unaffected
  • affected from 0 to 202609 (excl.)
  • Version 202609 is unaffected

Credits

  • Jaime Ramírez (JaimeRamirez-coder) reporter
  • arexgodofwar reporter
  • Snakinya reporter

References

Problem Types

  • Deserialization of Untrusted Data CWE