ESPnet vulnerabilities
We track 1 vulnerability in ESPnet products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest ESPnet vulnerabilities
- 8.8 High severity
espnet: Deserialization of Untrusted Data
ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization whe