CVE-2026-31214 Details

A vulnerability allowing insecure deserialization has been identified in the torch-checkpoint-shrink.py script of the ml-engineering project, specifically in commit 0099885db36a8f06556efe1faf552518852cb1e0. This vulnerability arises because the script uses torch.load() to read PyTorch checkpoint files (.pt) without activating the security-focused weights_only=True parameter. As a result, arbitrary Python objects can be deserialized using the pickle module. A remote attacker could exploit this flaw by supplying a maliciously crafted checkpoint file, potentially leading to arbitrary code execution under the user's context who is running the script.