CVE-2026-112304 Details
Description
docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without weights_only=True. Attackers who control a local or URL-supplied checkpoint can embed a malicious pickle payload to execute Python code with the loading process's privileges on torch releases before 2.6.
A vulnerability exists in docTR versions through 1.1.0, specifically within the 'load_pretrained_params()' function. This vulnerability arises from unsafe deserialization, as the function loads model checkpoints using 'torch.load' without the 'weights_only' parameter set to true. As a result, attackers can embed malicious pickle payloads into local or URL-supplied checkpoints, executing arbitrary Python code with the privileges of the process loading the checkpoint. This issue affects 'torch' releases prior to 2.6, which is when 'weights_only' defaulted to true.
Users can update to docTR version 1.1.1 or later, where this vulnerability has been addressed by changing the 'torch.load' call in 'load_pretrained_params()' to include 'weights_only=True'.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 19, 2026CISA-ADP
Assessed Oct 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/mindee/doctr/issues/2175 | CISA-ADP | ExploitIssue TrackingRemedyTechnical DescriptionVendor |
| https://github.com/mindee/doctr/blob/v1.1.0/doctr/models/utils/pytorch.py | [email protected] | Source CodeVendor |
| https://github.com/mindee/doctr/commit/687503dd15592483c4699ee51280b41938579a9e | [email protected] | Source CodeVendor |
| https://github.com/mindee/doctr/issues/2175 | [email protected] | ExploitIssue TrackingRemedyTechnical DescriptionVendor |
| https://www.vulncheck.com/advisories/doctr-through-1.1.0-unsafe-deserialization-rce-via-load-pretrained-params | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mindee docTR | <= 1.1.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 22, 2026 | CVE Modified | CISA-ADP |
| Oct 19, 2026 | New CVE Received | [email protected] |