CVE-2026-90777: ESPnet before 202609 Remote Code Execution via Unsafe Deserialization
ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weightsonly=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or fine-tuning path.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
ESPnet users are exposed when they initialize or fine-tune a model using a pretrained checkpoint obtained from an untrusted source. Systems that do not load attacker-supplied checkpoint files are not exposed through the described path.
What does an attacker need to do to exploit it?
An attacker needs to provide a crafted malicious checkpoint file and have a user load it through ESPnet's initialization or fine-tuning workflow. Code execution occurs during checkpoint deserialization.
What should teams do if they cannot update immediately?
Do not load pretrained model checkpoints from untrusted or unverifiable sources until the affected ESPnet version is replaced. Restrict checkpoint inputs to files obtained through trusted channels.
Which versions should be upgraded?
ESPnet versions before 202609 are affected. Upgrade to version 202609 or a later version.