Summary
generated automatically from NVD datadocTR through version 1.1.0 has an unsafe deserialization flaw (CWE-502) in load_pretrained_params(), which calls torch.load without weights_only=True when loading checkpoints. An attacker who controls a local or URL-supplied checkpoint can embed a malicious pickle payload and execute Python code with the privileges of the loading process, on torch releases before 2.6. The flaw is rated 7.5 (HIGH) under CVSS v3.1.
NVD description
docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without weights_only=True. Attackers who control a local or URL-supplied checkpoint can embed a malicious pickle payload to execute Python code with the loading process's privileges on torch releases before 2.6.
CVSS v3.1 Score
Information
- Published
- 19 oct. 2026
- Updated
- 19 oct. 2026
- Status
- Received
- Source
- disclosure@vulncheck.com
Weaknesses (CWE)
References (4)
Similar CVEs
Other vulnerabilities of type CWE-502
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.