AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

CVE-2026-94093: A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/l

mediumvulnerability

security

Source: NVD/CVE DatabaseSeptember 20, 2026CVE-2026-94093

Summary

A security vulnerability exists in stable-baselines3 (a library for reinforcement learning, which is a type of AI training) up to version 2.9.0 that allows attackers to execute arbitrary code by exploiting unsafe deserialization (converting saved data back into executable objects) in functions like PPO.load. The vulnerability can be triggered remotely and has been publicly disclosed, making it a real threat.

Solution / Mitigation

The source text mentions that a hardening fix is pending in PR #2264 (a proposed code change), which would add a safe mode for the load APIs in stable-baselines3. However, this fix has not yet shipped. Version 2.9.0 attempted to add protection via weights_only=True (a PyTorch parameter that restricts what can be loaded), but this was reverted in a later update to fix compatibility with PyTorch 1.13.