PT-2026-40063 · Pypi · Snorkel

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-31224

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions snorkel versions prior to 0.10.1

Description Insecure deserialization occurs in the MultitaskClassifier.load() method of the MultitaskClassifier class. The method utilizes torch.load() to load model weight files without enabling the weights only=True parameter. This allows the deserialization of arbitrary Python objects via the Pickle module, which is a process of converting a byte stream back into an object. A remote attacker can provide a maliciously crafted model file to achieve arbitrary code execution on the victim's system.

Recommendations Update to a version later than 0.10.0. As a temporary workaround, restrict the loading of model files to trusted sources only.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-31224

GHSA-GPX5-7XM4-229W

Affected Products

Snorkel

References · 4

• https://osv.dev/vulnerability/GHSA-gpx5-7xm4-229w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31224 · Security Note
• https://github.com/snorkel-team/snorkel · Note
• https://notion.so/CVE-2026-31224-35d1e1393188814185f3f6db86c9a4e9 · Note