PT-2026-40061 · Pypi · Snorkel

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-31222

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions snorkel versions prior to 0.10.1

Description Insecure deserialization occurs in the Trainer.load() method of the Trainer class. The method utilizes torch.load() to load model checkpoint files without enabling the weights only=True parameter. This allows the deserialization of arbitrary Python objects via the Pickle module (a Python module used for serializing and deserializing objects), which can enable a remote attacker to execute arbitrary code on the system by providing a maliciously crafted model file.

Recommendations Update to a version later than 0.10.0. As a temporary workaround, restrict the loading of model files from untrusted sources when using the Trainer.load() method.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-31222

GHSA-78CP-F66X-QMH5

Affected Products

Snorkel

References · 4

• https://osv.dev/vulnerability/GHSA-78cp-f66x-qmh5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31222 · Security Note
• https://github.com/snorkel-team/snorkel · Note
• https://notion.so/CVE-2026-31222-35d1e139318881db8398e0732af8df6d · Note