{"id":"CVE-2026-90777","summary":"ESPnet before 202609 Remote Code Execution via Unsafe Deserialization","details":"ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or fine-tuning path.","aliases":["GHSA-64f6-3gqc-r926"],"modified":"2026-09-16T03:30:42.235672919Z","published":"2026-09-13T11:42:27.045Z","database_specific":{"cwe_ids":["CWE-502"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90777.json","cna_assigner":"VulnCheck"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90777.json"},{"type":"ADVISORY","url":"https://github.com/espnet/espnet/releases/tag/v.202609"},{"type":"ADVISORY","url":"https://github.com/espnet/espnet/security/advisories/GHSA-64f6-3gqc-r926"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90777"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/espnet-before-202609-remote-code-execution-via-unsafe-deserialization"},{"type":"FIX","url":"https://github.com/espnet/espnet/commit/91ca045fc179f29bc7b7fe05cd852aea65310003"},{"type":"PACKAGE","url":"https://github.com/espnet/espnet"},{"type":"ARTICLE","url":"https://github.com/espnet/espnet/blob/v.202511/espnet2/torch_utils/load_pretrained_model.py#L99"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/espnet/espnet","events":[{"introduced":"0"},{"fixed":"1945ec2ed224fc3a93b27ccdd88bc873a224e903"},{"fixed":"91ca045fc179f29bc7b7fe05cd852aea65310003"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"202609"}],"source":["DESCRIPTION","REFERENCES"]}}],"versions":["v.202509","v.202604-patch1","v.202604","v.202511","v.202506","v.202503","v.202412","v.202409","v.202402","v.202310","v.202308","v.202304","v.202301","v.202211","v.202209","v.202207","v.202205","v.202204","v.0.10.6","v.0.10.5","v.0.10.4","v.0.10.3","v.0.10.2","v.0.10.1","v.0.10.0","v.0.9.10","v.0.9.9","v.0.9.8","v.0.9.7","v.0.9.6","v.0.9.5","v.0.9.4","v.0.9.3","v.0.9.2","v.0.9.1","v.0.9.0","v.0.8.0","v.0.7.0","v.0.6.3","v.0.6.2","v.0.6.1","v.0.6.0","v.0.5.4","v.0.5.3","v.0.5.2","v.0.5.1","v.0.5.0","v.0.4.3","v.0.4.2","v.0.4.1","v.0.4.0","v.0.3.1","v.0.2.0","v.0.1.5","v.0.1.4","v.0.1.3","v.0.1.0","v.0.1.2","v.0.1.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90777.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}