CVE-2026-31219
HighSummary
The _load_model() function in the neural_magic_training.py script of the optimate project is vulnerable to insecure deserialization. This allows a malicious attacker to execute arbitrary code on the victim's system by providing a crafted model file.
Risk Assessment
This vulnerability poses a serious security risk as it allows for remote code execution, potentially leading to full control over the victim's system.
Recommendation
It is recommended to enable the weights_only=True parameter in the torch.load() function and to validate model files before loading them to minimize the risk of unauthorized access.
Other vulnerabilities in neural_magic_training.py
See all- CVE-2026-31218High
The _load_model() function in the neural_magic_training.py script of the optimate project is vulnerable to insecure deserialization. The lack of enabling the weights_only=True security parameter when loading the state_dict.pt file allows for the deserialization of arbitrary Python objects, potentially leading to arbitrary code execution.
- CVE-2026-31217Critical
The _load_model() function in the neural_magic_training.py script of the optimate project allows arbitrary code execution. A user can supply a directory path via the --model command-line argument, which allows reading and executing the module.py file from that directory without validating its content.
Original NVD description (English source)
The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure deserialization (CWE-502). When a user provides a single model file path (e.g., .pt or .pth) via the --model command-line argument, the function loads the file using torch.load() without enabling the weights_only=True security parameter. This allows the deserialization of arbitrary Python objects through the Pickle module. A remote attacker can exploit this by providing a maliciously crafted model file, leading to arbitrary code execution during deserialization on the victim's system.