CVE-2026-54499 Details
Description
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loaders such as stanza.models.common.pretrain.Pretrain.load() attempt torch.load(..., weights_only=True) but fall back to torch.load(..., weights_only=False) on attacker-controllable pickle.UnpicklingError, allowing a malicious .pt pretrain or model file to execute arbitrary pickle code when a Stanza NLP pipeline loads it. This issue is fixed in version 1.12.2.
A remote code execution vulnerability exists in the Stanza NLP library for Python, specifically in versions prior to 1.12.2. The issue arises in the model loading functionality, where the library attempts to safely load PyTorch model files using a method that restricts the execution of arbitrary code. However, when this safe method encounters an error, Stanza improperly falls back to a less secure option that allows malicious code to be executed. This vulnerability can be exploited by placing a harmful model file in a location that Stanza will access, leading to arbitrary code execution on the machine where the Stanza pipeline is loaded.
Users can upgrade to Stanza version 1.12.2 or later, where this vulnerability has been patched. Instructions for downloading the latest version are available on the Stanza GitHub releases page.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/stanfordnlp/stanza/security/advisories/GHSA-v5jw-96jm-7h2c | CISA-ADP | ExploitVendor Advisory |
| https://github.com/stanfordnlp/stanza/commit/b745008c68c9e50ccb5acd537cb6f2453f8b7ad4 | [email protected] | Patch |
| https://github.com/stanfordnlp/stanza/pull/1587 | [email protected] | Issue TrackingPatch |
| https://github.com/stanfordnlp/stanza/releases/tag/v1.12.2 | [email protected] | Release Notes |
| https://github.com/stanfordnlp/stanza/security/advisories/GHSA-v5jw-96jm-7h2c | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
| CWE-676 | Use of Potentially Dangerous Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| stanford stanza | < 1.12.2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 13, 2026 | Initial Analysis | [email protected] |
| Jul 9, 2026 | CVE Modified | CISA-ADP |
| Jul 8, 2026 | New CVE Received | [email protected] |