CriticalVulnerability
CVE-2026-31238: Ludwig insecure deserialization in model serving via torch.load
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-31238
- Published
- Record updated
- Affected
- ludwig <= 0.10.4
- Fixed in
- No fixed version was stated when the source was last read.
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
CVE-2026-31238 affects the Ludwig framework through version 0.10.4, in its model serving component (CWE-502). When a model server starts with the ludwig serve command, the framework loads model weight files with torch.load() without setting weights_only=True, so arbitrary Python objects can be deserialized via the pickle module. An attacker who supplies a maliciously crafted PyTorch model file can achieve arbitrary code execution on the host running the Ludwig model server.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- InfoCVE-2026-123357: GROBID command execution through crafted PDF filename in Linux conversionSimilar attack · NVD/CVE Database
- MediumShai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI ToolsSimilar attack · Socket Blog
- MediumCPython flaw exposes AI inference servers to sandbox escape attacksSimilar attack · CSO Online
- HighCVE-2026-88981: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0…Similar attack · NVD/CVE Database
- MediumBinance heist is stark example of AI governance gaps and basic security failuresSimilar attack · CSO Online