Vulnerability · Published Jun 14, 2026 · Assigned by VulDB

CVE-2026-12191Comma AI Openpilot Pickle modeld.py pickle.loads deserialization

High 7.8

In plain English

A high-severity unsafe deserialization in Openpilot from Comma AI. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.1%top 96.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdrive/modeld/modeld.py of the component Pickle Module. The manipulation results in deserialization. The attack is only possible with local access. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Comma AI	Openpilot	0.11

Weakness: CWE-502, CWE-20 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-370837 | Comma AI Openpilot Pickle modeld.py pickle.loads deserialization vdb-entry, technical-description
VDB-370837 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-12191 | CVE Analysis and Report third-party-advisory
Submit #825699 | Comma AI Openpilot 0.11 Deserialization third-party-advisory