CVE-2026-112304CWE-502insecure-deserialization

CVE-2026-112304

High · published October 19, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without weights_only=True. Attackers who control a local or URL-supplied checkpoint can embed a malicious pickle payload to execute Python code with the loading process's privileges on torch releases before 2.6.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
7.7 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00290 · 20.4th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-10-19T20:17Z
References (5)
https://github.com/mindee/doctr/blob/v1.1.0/doctr/models/utils/pytorch.py · [email protected]https://github.com/mindee/doctr/commit/687503dd15592483c4699ee51280b41938579a9e · [email protected]https://github.com/mindee/doctr/issues/2175 · [email protected]https://www.vulncheck.com/advisories/doctr-through-1.1.0-unsafe-deserialization-rce-via-load-pretrained-params · [email protected]https://github.com/mindee/doctr/issues/2175 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 21 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 19 OCT 15:28Z
    docTR through 1.1.0 Unsafe Deserialization RCE via load_pretrained_params()
    cvelistv5
  • 19 OCT 15:28Z
    docTR through 1.1.0 Unsafe Deserialization RCE via load_pretrained_params()
    cvelistv5