Vulnerability · Published Sep 1, 2026 · Assigned by VulnCheck
CVE-2026-84202ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading
High 8.8
In plain English
A high-severity unsafe deserialization in modelscope from modelscope. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.7%top 47.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| modelscope | modelscope | 0 – through 1.40.0 |
Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- https://github.com/modelscope/modelscope product
- https://github.com/modelscope/modelscope/issues/1660 issue-tracking
- https://github.com/modelscope/modelscope/blob/v1.40.0/modelscope/models/audio/tts/voice.py technical-description
- https://github.com/modelscope/modelscope/blob/v1.40.0/modelscope/models/multi_modal/mplug/configuration_mplug.py technical-description
- VulnCheck Advisory: ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading third-party-advisory