EUVD-2026-83800

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2026-94093

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2026-94093

DLR-RM stable-baselines3 up to 2.9.0 is affected by unsafe pickle deserialization in the PPO.load, load_replay_buffer, and VecNormalize.load functions of save_util.py, enabling remote attacks with no privileges required (user interaction required). In v2.9.0 the PyTorch tensor load path was harde...