CVE-2026-10036-speechbrain-rce

CVE-2026-10036: SpeechBrain의 CKPT.yaml 파싱을 통한 임의 코드 실행 심각도: 높음, CVSS 4.0 8.7 , CVSS 3.1 8.8 CNA인 VulnCheck가 지정 벡터 v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 벡터 v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 영향 대상: SpeechBrain 1.1.1 수정 버전: 1.1.1 / 커밋 22a6166 CWE:...

CVE-2026-10036

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...