CVE-2026-112086: ESPnet Inference Model inference_model.py build_model deserialization
A vulnerability was found in ESPnet up to 202610.post2. This affects the function buildmodel of the file espnet3/publication/inferencemodel.py of the component Inference Model Handler. The manipulation of the argument target results in deserialization. It is possible to launch the attack remotely. The exploit has been made public and could be used. The patch is identified as f217b24f06de55e332cab10231469d5890dbbe00. It is best practice to apply a patch to resolve this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ESPnetto a version that resolves this vulnerability.Patch f217b24f06de55e332cab10231469d5890dbbe00
Event History
Frequently Asked Questions
What attacker access is required to exploit this issue?
The issue is remotely exploitable and requires no privileges, but it does require user interaction. Exploitation involves manipulating the _target_ argument processed by build_model.
Which deployments should be prioritized for remediation?
Prioritize ESPnet deployments that expose or process untrusted inputs through the Inference Model Handler, particularly where an attacker can influence the _target_ argument. The affected component is espnet3/publication/inference_model.py.
Is public exploitation material available?
Yes. A public exploit has been reported, so organizations should treat exposed instances as higher priority for remediation and investigation.
What fix is identified for this vulnerability?
Apply the patch identified by commit f217b24f06de55e332cab10231469d5890dbbe00. The issue affects ESPnet versions up to 202610.post2.