CVE-2026-108947 yoshitomo-matsubara torchdistill main_util.py load_ckpt deserialization
Local attackers can achieve code execution via unsafe deserialization in the load_ckpt function of the torchdistill library.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-108947?
CVE-2026-108947 is a medium-severity unsafe deserialization vulnerability in yoshitomo-matsubara torchdistill, published on 13 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file torchdistill/common/main_util.py. Executing a manipulation of the argument src_ckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been published and may be used. The project maintainer explains: "This is very similar to an internal report that GH auto-generated for the owner before, which I found tolerable for this project at that time. So I will close this as duplicate."
Which versions are affected by CVE-2026-108947?
How do I fix CVE-2026-108947?
No fix has been published for CVE-2026-108947 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2026-108947 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-108947 exists.
Sources
Also known as GHSA-m93m-2x62-w23p.