HIGHVulnerability

CVE-2026-90777

ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or fine-tuning path.

Properties

severity
HIGH
score
8.8
cve_id
CVE-2026-90777
signal_observed_at
2026-09-23T22:45:07+00:00
vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
published_at
2026-09-13T12:17:16.690
last_modified
2026-09-23T17:17:44.357

Related Entities (2)

HAS_WEAKNESS (1)

[Weakness]Deserialization of Untrusted Data

DESCRIBED_BY (1)

[Source]NVD

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-90777 — Ninja Signal Threat Intelligence | Ninja Signal