CVE-2026-31218 Details

A vulnerability exists in the Optimate project, specifically in the neural_magic_training.py script, within commit a6d302f912b481c94370811af6b11402f51d377f. The issue arises in the _load_model() function, which is susceptible to insecure deserialization. When the function loads a model state dictionary from a state_dict.pt file using torch.load(), it fails to activate the weights_only=True security parameter. This oversight permits the deserialization of arbitrary Python objects via the Pickle module. A remote attacker could exploit this vulnerability by supplying a maliciously crafted state_dict.pt file in a directory specified with the --model argument, leading to arbitrary code execution during the deserialization process on the victim's system.