CVE-2026-84202CWE-502insecure-deserialization

CVE-2026-84202

High · published September 1, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00682 · 51.9th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-09-01T20:17Z
References (6)
https://github.com/modelscope/modelscope · [email protected]https://github.com/modelscope/modelscope/blob/v1.40.0/modelscope/models/audio/tts/voice.py · [email protected]https://github.com/modelscope/modelscope/blob/v1.40.0/modelscope/models/multi_modal/mplug/configuration_mplug.py · [email protected]https://github.com/modelscope/modelscope/issues/1660 · [email protected]https://www.vulncheck.com/advisories/modelscope-through-1.40.0-unsafe-yaml-deserialization-in-model-config-loading · [email protected]https://github.com/modelscope/modelscope/issues/1660 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 03 SEP 03:32Z
    EPSS moved — → 0%
    epss
  • 01 SEP 15:18Z
    ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading
    cvelistv5