CVE-2026-31253 Details

A vulnerability allowing insecure deserialization has been identified in the Flash Attention training framework, specifically in versions prior to the commit on April 13, 2025. This vulnerability arises in the checkpoint loading mechanism, where the load_checkpoint() function in checkpoint.py and the checkpoint loading code in eval.py use torch.load() without the security-restrictive weights_only=True parameter. As a result, arbitrary Python objects can be deserialized via the pickle module. An attacker could exploit this by providing a maliciously crafted checkpoint file, which, when loaded during model warmstarting or evaluation, would execute arbitrary code on the victim's system.