Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-90777 1 Espnet 1 Espnet 2026-09-13 8.8 High
ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or fine-tuning path.