CVE-2026-90777 espnet CVE debrief

Who should care

Defenders responsible for deploying and managing ESPnet-based systems should assess exposure and prioritize verification of model checkpoint integrity. This includes operators, platform administrators, vulnerability management teams, and security teams who need to ensure the security and integrity of model checkpoints and prevent arbitrary code execution.

Why it matters

CVE-2026-90777 is a high-severity vulnerability in ESPnet that allows attackers to execute arbitrary code during model deserialization. Defenders should prioritize verifying model checkpoint integrity and updating ESPnet to a patched version.

• Arbitrary code execution during model deserialization
• Potential for lateral movement and further exploitation
• Need for verification of model checkpoint integrity
• Priority for updating ESPnet to a patched version

Technical summary

The ESPnet toolkit insecurely deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing attackers to craft malicious checkpoint files that execute code during deserialization. This vulnerability affects ESPnet-based systems and allows for arbitrary code execution during model deserialization. Defenders should prioritize verifying model checkpoint integrity and updating ESPnet to a patched version. The ESPnet project has released a patched version (v.202609) that addresses this issue.

Defensive priority

Defenders should prioritize verifying the integrity of model checkpoints and ensuring that only trusted models are loaded.

Recommended defensive actions

• Verify the integrity of model checkpoints and ensure only trusted models are loaded
• Update ESPnet to version v.202609 or later
• Implement additional security measures to monitor and restrict model loading
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The vulnerability was reported by Vulncheck and is tracked under CVE-2026-90777. The ESPnet project has released a patched version (v.202609) that addresses this issue. Evidence is limited to public statements from the vendor and CVE Program records. Defenders should verify model checkpoint integrity with explicit evidence limits and defensive verification tasks.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.