{"data":{"id":"3402bc3c-7684-48b9-992f-af8ff22bb580","title":"CVE-2026-94093: A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function…","summary":"CVE-2026-94093 affects DLR-RM stable-baselines3 up to 2.9.0, specifically the PPO.load, load_replay_buffer and VecNormalize.load functions in save_util.py. Crafted input leads to unsafe deserialization that can be triggered remotely, and a public exploit exists. Version 2.9.0 added weights_only=True hardening to the PyTorch tensor load path, but PR #1913 reverted it on master to fix PyTorch 1.13 compatibility, and these core load APIs have no safe mode or gate.","solution":"The source states that the outstanding hardening in PR #2264 is pending and has not yet shipped. No fixed version is given.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-94093","publishedAt":"2026-09-20T23:17:03.343Z","cveId":"CVE-2026-94093","cweIds":["CWE-20","CWE-502"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["stable-baselines3","PPO","VecNormalize","PyTorch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"DLR-RM stable-baselines3 unsafe deserialization in PPO.load","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00452,"epssCheckedAt":"2026-11-05T00:11:43.606Z","kevDateAdded":null,"advisoryAliases":["GHSA-rh54-3493-vqgc"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T00:10:36.524Z","patchAvailable":null,"disclosureDate":"2026-09-20T23:17:03.343Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}