Log in Start free

Vulnerability · Published Oct 13, 2026 · Assigned by VulDB

CVE-2026-108947yoshitomo-matsubara torchdistill main_util.py load_ckpt deserialization

Medium 5.3

In plain English

A medium-severity unsafe deserialization in torchdistill from yoshitomo-matsubara. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 89.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file torchdistill/common/main_util.py. Executing a manipulation of the argument src_ckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been published and may be used. The project maintainer explains: "This is very similar to an internal report that GH auto-generated for the owner before, which I found tolerable for this project at that time. So I will close this as duplicate."

Affected products (as reported)

VendorProductVersions
yoshitomo-matsubara torchdistill 1.1.01.1.11.1.21.1.31.1.41.1.5

Weakness: CWE-502, CWE-20 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

References