PT-2026-39636 · Cosyvoice · Cosyvoice

Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-31251

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions CosyVoice versions prior to commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e

Description The gRPC server component contains an insecure deserialization issue. During server initialization, the system loads a speech synthesis model from a user-specified directory using the torch.load() function without the weights only=True security parameter enabled. This allows the deserialization of arbitrary Python objects via the pickle module, enabling an attacker to execute arbitrary code on the system by providing malicious model files within the specified directory.

Recommendations Update to a version following commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-20

CWE-94

CWE-915

Related Identifiers

CVE-2026-31251

Affected Products

Cosyvoice

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-31251 · Security Note
• https://github.com/FunAudioLLM/CosyVoice · Note
• https://twitter.com/CVEnew/status/2053954545034711217 · Twitter Post
• https://notion.so/CVE-2026-31251-35d1e1393188816f9bf5f3ccea3aa16f · Note