21081 matches found
CVE-2026-31219
The loadmodel function in the neuralmagictraining.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 is vulnerable to insecure deserialization CWE-502. When a user provides a single model file path e.g., .pt or .pth via the --model command-line argumen...
CVE-2026-31232
The CosyVoice project (up to commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e) is vulnerable to an insecure deserialization (CWE-502) flaw during its model loading process. The application uses torch.load() to process .pt model files from a user-specified directory (via the --model_dir argument) w...
CVE-2026-31229
The Adversarial Robustness Toolbox (ART) versions thru 1.20.1 are vulnerable to an insecure deserialization (CWE-502) flaw within the Kubeflow component 's model loading functionality. The root cause is the use of torch.load() to process model weights (e.g., model.pt) without the security-restric...
CVE-2026-31232: Deserialization of Untrusted Data
The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e 2025-30-21 contains an insecure deserialization vulnerability CWE-502 in its model loading process. When loading model files .pt from a user-specified directory via the --modeldir argument, the code uses torch.load without...
CVE-2026-31239: Deserialization of Untrusted Data
The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization CWE-502 when loading pre-trained models from HuggingFace Hub. The MambaLMHeadModel.frompretrained method uses torch.load to load the pytorchmodel.bin weight file without enabling the security-restrictive...
CTFusion: A CTF-Based Benchmark for LLM Agent Evaluation
Recent advances in Large Language Models LLMs have enabled agentic systems for complex, multi-step tasks; cybersecurity is emerging as a prominent application. To evaluate such agents, researchers widely adopt Capture The Flag CTF benchmarks. However, current CTF benchmarks reuse existing...
CVE-2026-31217
The loadmodel function in the neuralmagictraining.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 allows arbitrary code execution. When a user supplies a directory path via the --model command-line argument, the function reads a module.py file from...
CVE-2026-31238
The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization CWE-502 in its model serving component. When starting a model server with the ludwig serve command, the framework loads model weight files using torch.load without enabling the security-restrictive weightsonly=True...
CVE-2026-31229
The Adversarial Robustness Toolbox ART thru 1.20.1 contains an insecure deserialization vulnerability CWE-502 in its Kubeflow component's model loading functionality. When loading model weights from a file e.g., model.pt during robustness evaluation, the code uses torch.load without the...
CVE-2026-31217
The optimate AI model optimization tool library (versions prior to commit a6d302f912b481c94370811af6b11402f51d377f ) is vulnerable to arbitrary code execution. The _load_model() function in the neural_magic_training.py script fails to validate or sanitize a module.py file when a directory path is...
CVE-2026-31238
The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization CWE-502 in its model serving component. When starting a model server with the ludwig serve command, the framework loads model weight files using torch.load without enabling the security-restrictive weightsonly=True...
CVE-2026-31236
The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec function...
PT-2026-40007
A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns...
MINI-GQ35-RX9M-X369
Bulletin has no description...
MINI-W46H-24X5-MPFC
Bulletin has no description...
MINI-P72F-5CRJ-32FW
Bulletin has no description...
MINI-95G3-M35W-G493
Bulletin has no description...
MINI-6XMC-299M-GP66
Bulletin has no description...