CVE-2026-90777 Details

A remote code execution vulnerability exists in ESPnet versions prior to 202609. The issue arises from the deserialization of pretrained model checkpoints using 'torch.load' with 'weights_only=False', which allows execution of arbitrary code from files supplied by an attacker. This vulnerability can be exploited by crafting malicious checkpoint files that execute code during the deserialization process, particularly when the models are loaded for initialization or fine-tuning.

Users can update to ESPnet version 202609 or later, where this vulnerability has been patched. Instructions for updating can be found in the ESPnet documentation.