CVE-2026-31249
HIGH EPSS 11.3%
Published May 11, 20261mo ago · Modified Jun 17, 20261w ago
7.3 CVSS 3.1
Published May 11, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago
Description
CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its make_parquet_list.py data processing tool. The script loads PyTorch .pt files (utterance embeddings, speaker embeddings, speech tokens) using torch.load() without enabling the weights_only=True security parameter. This allows the deserialization of arbitrary Python objects via the pickle module. An attacker can exploit this by providing malicious .pt files within a data directory. When a victim processes this directory using the tool, arbitrary code is executed on the victim's system.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity Low
Availability Low
Threat Intelligence
EPSS Exploit Probability
11.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-502 Deserialization of Untrusted Data Validation
References 2
- github.com https://github.com/FunAudioLLM/CosyVoice
- notion.so https://www.notion.so/CVE-2026-31249-35d1e13931888112af48f0bddf18f0b9
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.