CVE-2026-90777

42th percentile - higher than 42% of all known CVEs

ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or fine-tuning path.

An attacker can remotely supply a malicious model file that, when loaded by ESPnet, executes arbitrary code, leading to full system compromise. The risk is critical in environments using untrusted models.

Update ESPnet to version 202609 or later. Avoid loading untrusted model checkpoints until a patch is applied.