CVE-2026-31219 Deserialization in n/a
A remote attacker can execute arbitrary code by providing a malicious model file to the optimate project due to insecure deserialization in torch.load.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-31219?
CVE-2026-31219 is a high-severity unsafe deserialization vulnerability in n/a, published on 12 May 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure deserialization (CWE-502). When a user provides a single model file path (e.g., .pt or .pth) via the --model command-line argument, the function loads the file using torch.load() without enabling the weights_only=True security parameter. This allows the deserialization of arbitrary Python objects through the Pickle module. A remote attacker can exploit this by providing a maliciously crafted model file, leading to arbitrary code execution during deserialization on the victim's system.
Weakness: CWE-502
Which versions are affected by CVE-2026-31219?
How do I fix CVE-2026-31219?
No fix has been published for CVE-2026-31219 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2026-31219 being exploited?
There is no known exploitation of CVE-2026-31219 in the wild and no public exploit code.
Sources
Also known as GHSA-f5xg-pvfx-vwh9.