HIGH 8.7 NVD
CVE-2026-90777
ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplie
ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or fine-tuning path.
References
- https://github.com/espnet/espnet
- https://github.com/espnet/espnet/blob/v.202511/espnet2/torch_utils/load_pretrained_model.p
- https://github.com/espnet/espnet/commit/91ca045fc179f29bc7b7fe05cd852aea65310003
- https://github.com/espnet/espnet/releases/tag/v.202609
- https://github.com/espnet/espnet/security/advisories/GHSA-64f6-3gqc-r926
This high severity vulnerability with a CVSS score of 8.7 was published on 2026-09-13 via NVD.
vulnfeed aggregates 13632 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.