CVE-2026-10036
HighCVSS 8.8Summary
SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability. Attackers can execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recover_if_possible(). Even if the malicious checkpoint is never selected for recovery, code execution can occur.
Risk Assessment
The risk includes remote code execution by an attacker who can supply a malicious CKPT.yaml file, potentially leading to full system compromise.
Recommendation
It is recommended to upgrade SpeechBrain to version 1.1.1 or later and avoid loading untrusted CKPT.yaml files.
Original NVD description (English source)
SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recover_if_possible(). Attackers can embed malicious Python object construction tags such as !!python/object/apply in any CKPT.yaml file within the configured checkpoint path to trigger code execution during candidate discovery, even if the malicious checkpoint is never selected for recovery.