Description
A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/publication/inference_model.py of the component Inference Model Handler. The manipulation of the argument _target_ results in deserialization. It is possible to launch the attack remotely. The exploit has been made public and could be used. The patch is identified as f217b24f06de55e332cab10231469d5890dbbe00. It is best practice to apply a patch to resolve this issue.
Published: 2026-10-19
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Remote code execution through insecure deserialization
Action: Apply patch immediately
AI Analysis

Impact

A flaw in ESPnet's inference_model.py enables an attacker to manipulate the internal _target_ argument, causing deserialization during model construction. This bypasses normal security controls and allows arbitrary code to be executed on the host. The weakness is a classic insecure deserialization (CWE-502) compounded by insufficient input validation (CWE-20).

Affected Systems

ESPnet, all releases up to and including 202610.post2. The vulnerability is present in the build_model function of espnet3/publication/inference_model.py.

Risk and Exploitability

The CVSS score of 5.3 indicates a moderate severity. The EPSS score is not available, and the issue is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is remote exploitation via the build_model interface; an attacker can craft a malicious _target_ payload and trigger deserialization. The public exploit demonstrates that this vulnerability can be leveraged to compromise confidentiality, integrity, and availability of affected installations.

Generated by OpenCVE AI on October 19, 2026 at 07:50 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor patch identified by commit f217b24f06de55e332cab10231469d5890dbbe00 to the espnet3/publication/inference_model.py module.
  • Restrict exposure of the build_model interface to trusted clients or internal services only, ensuring that only authenticated and authorized requests can invoke it.
  • Implement strict validation and sanitization of the _target_ input parameter, rejecting any values that do not match expected, safe patterns or are not signed by a trusted source.

Generated by OpenCVE AI on October 19, 2026 at 07:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 Oct 2026 06:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/publication/inference_model.py of the component Inference Model Handler. The manipulation of the argument _target_ results in deserialization. It is possible to launch the attack remotely. The exploit has been made public and could be used. The patch is identified as f217b24f06de55e332cab10231469d5890dbbe00. It is best practice to apply a patch to resolve this issue.
Title ESPnet Inference Model inference_model.py build_model deserialization
First Time appeared Espnet
Espnet espnet
Weaknesses CWE-20
CWE-502
CPEs cpe:2.3:a:espnet:espnet:*:*:*:*:*:*:*:*
Vendors & Products Espnet
Espnet espnet
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Espnet Espnet
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-19T06:00:25.807Z

Reserved: 2026-10-18T16:11:58.470Z

Link: CVE-2026-112086

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-19T06:17:23.667

Modified: 2026-10-19T06:17:24.077

Link: CVE-2026-112086

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T08:00:08Z

Weaknesses
  • CWE-20

    Improper Input Validation

  • CWE-502

    Deserialization of Untrusted Data