{"data":{"id":"52768d17-18f0-46f2-b554-02fa0695a700","title":"CVE-2026-31239: The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading…","summary":"The mamba language model framework through 2.2.6 is affected by insecure deserialization (CWE-502) when loading pre-trained models from HuggingFace Hub. The MambaLMHeadModel.from_pretrained() method calls torch.load() on pytorch_model.bin without setting weights_only=True, so arbitrary Python objects can be deserialized via the pickle module. An attacker who publishes a malicious model repository can execute arbitrary code on a victim's system, in the context of the mamba process, when the victim loads a model from it.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-31239","publishedAt":"2026-05-12T18:16:52.320Z","cveId":"CVE-2026-31239","cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["mamba-ssm@<= 2.2.6"],"affectedPackageNames":["mamba-ssm"],"affectedPackageRefs":["pypi:mamba-ssm"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["mamba language model framework","HuggingFace Hub","MambaLMHeadModel"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"mamba language model framework insecure deserialization when loading models","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00597,"epssCheckedAt":"2026-10-14T06:09:07.401Z","kevDateAdded":null,"advisoryAliases":["GHSA-pq2f-x424-6fjm"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:27.998Z","patchAvailable":null,"disclosureDate":"2026-05-12T18:16:52.320Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"]}}