Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-90777: ESPnet may run attacker code when loading model files

CVE-2026-90777 · published 17 days ago

Summary

The ESPnet speech toolkit can execute unwanted programs if it opens a crafted model checkpoint file. This happens because the software loads the file without checking its contents, allowing an attacker to embed malicious code. Update ESPnet to the latest version or avoid loading untrusted model files.

What to do

Update espnet espnet to version 202609 or later.

Affected software

Vendor	Product	Affected versions
espnet	espnet	< 202609

Original advisory text

ESPnet before 202609 Remote Code Execution via Unsafe Deserialization

ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or fine-tuning path.

References

https://github.com/espnet/espnet/commit/91ca045fc179f29bc7b7fe05cd852aea65310003 Patch
https://github.com/espnet/espnet Product
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90777... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-90777 Vendor Advisory
https://github.com/espnet/espnet/blob/v.202511/espnet2/torch_utils/load_pretrain... Third Party Advisory
https://github.com/espnet/espnet/releases/tag/v.202609 Vendor Advisory
https://github.com/espnet/espnet/security/advisories/GHSA-64f6-3gqc-r926 Vendor Advisory
https://www.vulncheck.com/advisories/espnet-before-202609-remote-code-execution-... Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

9.9 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-502Deserialization of Untrusted Data

Timeline

Published13 Sep 2026

Updated30 Sep 2026

First seen13 Sep 2026

Sources

CVE-2026-90777 · NVD

CVE-2026-90777 · MITRE

CVE-2026-90777 · OSV

GHSA-64f6-3gqc-r926 · GHSA

Track software like this

Free during beta