PT-2026-39634 · Cosyvoice · Cosyvoice

Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-31249

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions CosyVoice versions prior to commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e

Description The make parquet list.py data processing tool is subject to insecure deserialization. The script utilizes the torch.load() function to load PyTorch .pt files, including utterance embeddings, speaker embeddings, and speech tokens, without enabling the weights only=True security parameter. This allows the deserialization of arbitrary Python objects via the pickle module. An attacker can execute arbitrary code on a system by providing malicious .pt files within a data directory that is then processed by the tool.

Recommendations Update to a version of CosyVoice beyond commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-31249

Affected Products

Cosyvoice

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-31249 · Security Note
• https://github.com/FunAudioLLM/CosyVoice · Note
• https://twitter.com/CVEnew/status/2053954542434226460 · Twitter Post
• https://notion.so/CVE-2026-31249-35d1e13931888112af48f0bddf18f0b9 · Note