CVE-2026-10036-speechbrain-rce

CVE-2026-10036: Ejecución Arbitraria de Código en SpeechBrain mediante el Análisis de CKPT.yaml Gravedad: Alta, CVSS 4.0 8.7 , CVSS 3.1 8.8 asignado por VulnCheck, la CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1:...

CVE-2026-10036

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...