CVE-2026-90777— ESPnet before 202609 Remote Code Execution via Unsafe Deserialization
Quick assessment
Affected
espnet espnet
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ESPnet 在 202609 版本之前，在反序列化预训练模型检查点时使用了 并设置 ，这使得攻击者可以通过精心构造的恶意文件触发任意代码执行。攻击者能够创建特殊的检查点文件，使其在通过初始化或微调路径加载时，在反序列化过程中执行攻击者指定的代码。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-90777
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ESPnet before 202609 Remote Code Execution via Unsafe Deserialization
Source: CVE Program / CVE List V5
Vulnerability Description
ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or fine-tuning path.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-90777
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-90777
请登录查看更多情报信息。
Other References for CVE-2026-90777 (6)
-
https://github.com/espnet/espnet product
-
https://github.com/espnet/espnet/releases/tag/v.202609 release-notes
IV. Related Vulnerabilities
Same weakness: CWE-502
-
CVE-2026-90490
lenve vhr MailReceiver deserialization -
CVE-2026-78175
Tutor LMS <= 4.0.7 - Authenticated (Subscriber+) PHP Object -
CVE-2026-78006
The Events Calendar <= 6.17.4 - Unauthenticated PHP Object I -
CVE-2026-87719
Deserialization of Untrusted Data in GitLab -
CVE-2026-62107
WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injec
V. Comments for CVE-2026-90777
No comments yet