PT-2026-39635 · Cosyvoice · Cosyvoice

Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-31250

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions CosyVoice versions prior to commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e

Description An insecure deserialization issue exists in the average model.py model averaging tool. The script utilizes the torch.load() function to load PyTorch checkpoint files (epoch *.pt) without enabling the weights only=True security parameter. This allows the deserialization of arbitrary Python objects via the pickle module, which is a process of converting a byte stream back into an object. An attacker can execute arbitrary code on a system by providing malicious checkpoint files within a directory used by the tool.

Recommendations Update to a version beyond commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e. As a temporary workaround, restrict the use of the average model.py tool or avoid processing checkpoint files from untrusted sources.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-31250

Affected Products

Cosyvoice

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-31250 · Security Note
• https://github.com/FunAudioLLM/CosyVoice · Note
• https://notion.so/CVE-2026-31250-35d1e13931888147a9a3e1c5e239a0a7 · Note
• https://twitter.com/CVEnew/status/2053954544090878104 · Twitter Post