PT-2026-39637 · Cosyvoice · Cosyvoice

Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-31252

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions CosyVoice versions prior to commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e

Description An insecure deserialization issue exists in the model loading component. The framework utilizes the torch.load() function to load model weight files, such as "llm.pt", "flow.pt", and "hift.pt", without the weights only=True parameter enabled. This allows the deserialization of arbitrary Python objects through the pickle module. An attacker can execute arbitrary code on a system by providing a malicious model directory with specially crafted files that are processed when the CosyVoice Web UI is started.

Recommendations Update to a version beyond commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e.

Fix

Code Injection

Weakness Enumeration

CWE-94

CWE-915

Related Identifiers

CVE-2026-31252

Affected Products

Cosyvoice

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-31252 · Security Note
• https://github.com/FunAudioLLM/CosyVoice · Note
• https://twitter.com/CVEnew/status/2053954545965842669 · Twitter Post
• https://notion.so/CVE-2026-31252-35d1e139318881ef8acfcd877a432569 · Note