Vulnerability · Published Aug 27, 2026 · Assigned by VulnCheck
CVE-2026-10036SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing
High 8.8
In plain English
A high-severity unsafe deserialization in speechbrain from speechbrain. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recover_if_possible(). Attackers can embed malicious Python object construction tags such as !!python/object/apply in any CKPT.yaml file within the configured checkpoint path to trigger code execution during candidate discovery, even if the malicious checkpoint is never selected for recovery.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| speechbrain | speechbrain | 0 – before 1.1.1 |
Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- Researcher Disclosure technical-description, exploit
- SpeechBrain v1.1.1 Release Notes release-notes
- Pull Request issue-tracking, patch
- Patch Commit patch
- https://www.vulncheck.com/advisories/speechbrain-arbitrary-code-execution-via-ckpt-yaml-parsing third-party-advisory