{"data":{"id":"6f4b8a11-52e9-45e2-b60d-17f3ca3a3f3b","title":"CVE-2026-73325: Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers t","summary":"Fujitsu Research's OneCompression library version 1.2.0 has a vulnerability where it unsafely deserializes (converts data back into usable code) checkpoint files using Python's pickle module, allowing attackers to run arbitrary code by providing a malicious model.pt file. When the library loads a model file, it can execute hidden malicious instructions that attackers have embedded in the file, potentially compromising the entire system.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73325","publishedAt":"2026-08-12T16:17:23.000Z","cveId":"CVE-2026-73325","cweIds":["CWE-502"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["model_theft","supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Fujitsu Research","OneCompression"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-12T16:17:23.000Z","capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}