Live › vulnerability › CVE-2026-112086
Go to dashboardESPnet up to 202610.post2 has a flaw in build_model in espnet3/publication/inference_model.py where the _target_ argument is deserialized without checks. A remote attacker who can supply that argument can get code run on the machine that loads the model.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run ESPnet 3 inference through the publication inference model handler and pass it configuration or model specifications that come from users or other untrusted sources. Projects that only load their own fixed model configs in a trusted pipeline are much less exposed. unknown whether the sources name a specific deployment pattern beyond this.
No product ranges from the sources yet.
pip show espnet, and compare it to 202610.post2espnet3/publication/inference_model.py in the installed package and check whether build_model accepts a _target_ value from outside input202610.post2 to a release that includes commit f217b24f06de55e332cab10231469d5890dbbe00Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/publication/inference_model.py of the component Inference Model Handler. The manipulation of the argument target results in deserialization. It is possible to launch the attack remotely. The exploit has been made public and could be used. The patch is identified as f217b24f06de55e332cab10231469d5890dbbe00. It is best practice to apply a patch to resolve this issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-112086")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.