CVE-2026-112086: ESPnet Inference Model inference_model.py build_model deserialization

Severity: medium (CVSS 6.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-19 · updated 2026-10-19
Weakness: CWE-20

Description

A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/publication/inference_model.py of the component Inference Model Handler. The manipulation of the argument _target_ results in deserialization. It is possible to launch the attack remotely. The exploit has been made public and could be used. The patch is identified as f217b24f06de55e332cab10231469d5890dbbe00. It is best practice to apply a patch to resolve this issue.

Affected products

ESPnet: 202610.post2

References

https://github.com/espnet/espnet/
https://github.com/espnet/espnet/commit/f217b24f06de55e332cab10231469d5890dbbe00
https://github.com/espnet/espnet/issues/6828
https://github.com/espnet/espnet/pull/6829
https://github.com/user-attachments/files/32957363/poc.zip
https://vuldb.com/cve/CVE-2026-112086
https://vuldb.com/submit/1011320
https://vuldb.com/vuln/421831
https://vuldb.com/vuln/421831/cti

Get alerted when CVE-2026-112086 or the next vulnerability affects your stack