Live › vulnerability › CVE-2026-116103
Go to dashboardnnabla (Sony Neural Network Libraries) up to and including 1.39.0, the final release, passes the first line of each .txt parameter file to Python eval() in load_param_in_txt. Running 'nnabla_cli encode_param' on a parameter folder from someone else runs their code as you. The project is end-of-life and archived, and no fix exists. A public PoC exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 01:38 UTC. All times on this page are UTC.
Teams that use Sony Neural Network Libraries (nnabla) up to 1.39.0 and run its encode/decode parameter command-line tooling on input they do not fully control. The maintainer no longer supports these versions, so no vendor patch is expected. Teams that do not use this command handler, or that run only trusted parameter files, are less exposed.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| nnabla | pypi | <= 1.39.0 | – |
pip show nnabla; any installed version (1.39.0 is the last release) is affectednnabla_cli encode_param (and decode_param) use, and whether the input directory comes from outside your teameval(ds.pop(0)) in python/src/nnabla/utils/cli/encode_decode_param.pyEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the component Encode Param Command Handler. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
This page as .md · .json · in your agent: get_signal("CVE-2026-116103")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.