CVE-2026-84202
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users.
Risk Assessment
Risk of arbitrary code execution on users' machines when loading malicious models, potentially leading to full system compromise.
Recommendation
Update ModelScope to a version using a safe YAML loader and verify model sources before loading.
Other vulnerabilities in ModelScope
Original NVD description (English source)
ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users.