Ivan Marković

**Name of the Vulnerable Software and Affected Versions** ESA AnomalyMatch versions prior to 1.3.1 **Description** An issue allows attackers to execute arbitrary code through the use of crafted model checkpoint files. The problem occurs because affected components load model files from session directories using the `torch.load()` function with unrestricted deserialization, a process where data is converted back into an object without sufficient validation. **Recommendations** Update ESA AnomalyMatch to version 1.3.1 or later.