CVE-2026-73325 Fujitsu OneCompression 1.2.0 Arbitrary Code Execution via torch.load Deserialization

Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.loadquantizedmodelpt unconditionally calls torch.load with weightsonly=False,...