CyberRota Analysis
AI-GeneratedESPnet versions prior to 202609 are vulnerable due to insecure deserialization of pretrained model checkpoints, which allows for arbitrary code execution via maliciously crafted files. This vulnerability poses a significant risk, as it can be exploited during the model initialization or fine-tuning processes. Organizations utilizing ESPnet for machine learning tasks should prioritize patching this vulnerability to mitigate potential attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or fine-tuning path.