CVE-2026-73325: Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers t

Fujitsu Research's OneCompression library version 1.2.0 has a vulnerability where it unsafely deserializes (converts data back into usable code) checkpoint files using Python's pickle module, allowing attackers to run arbitrary code by providing a malicious model.pt file. When the library loads a model file, it can execute hidden malicious instructions that attackers have embedded in the file, potentially compromising the entire system.