Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-108947— yoshitomo-matsubara torchdistill main_util.py load_ckpt deserialization

Quick assessment

Affected
yoshitomo-matsubara torchdistill
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 yoshitomo-matsubara/torchdistill 项目 1.1.5 及更早版本中发现了一个安全缺陷。该缺陷影响文件 中的 函数。通过操纵参数 ，可触发不安全的反序列化操作。该漏洞需要在本地环境中发起攻击。目前相关利用代码已公开，可能被恶意利用。项目维护者在回应中表示：“此漏洞与 GitHub 此前自动为该仓库所有者生成的内部报告非常相似，当时我认为该项目可接受此类风险，因此我将此报告作为重复项关闭。”

CVSS 5.3 · Medium EPSS 0.27% · P18

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 6

VendorProduct Version RangeStatus
yoshitomo-matsubara torchdistill 1.1.0 affected
1.1.1 affected
1.1.2 affected
1.1.3 affected
1.1.4 affected
1.1.5 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-108947

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
yoshitomo-matsubara torchdistill main_util.py load_ckpt deserialization
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file torchdistill/common/main_util.py. Executing a manipulation of the argument src_ckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been published and may be used. The project maintainer explains: "This is very similar to an internal report that GH auto-generated for the owner before, which I found tolerable for this project at that time. So I will close this as duplicate."
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
yoshitomo-matsubara torchdistill 1.1.0 cpe:2.3:a:yoshitomo-matsubara:torchdistill:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-108947

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-108947

请登录查看更多情报信息。

Proof of Concept for CVE-2026-108947 (2)

Other References for CVE-2026-108947 (1)

IV. Related Vulnerabilities

Same weakness: CWE-502

V. Comments for CVE-2026-108947

No comments yet

Leave a comment