CVE-2026-31229: The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization vulnerability (CWE-502) in…

Summary

The Adversarial Robustness Toolbox (ART) through 1.20.1 contains an insecure deserialization flaw (CWE-502) in its Kubeflow component's model loading. During robustness evaluation, model weights loaded from a file such as model.pt use torch.load() without weights_only=True, which permits Pickle deserialization of arbitrary Python objects. An attacker who uploads a crafted model file to object storage referenced by the pipeline, or who controls the model_id parameter to point to such a file, can achieve remote code execution when the pipeline loads the model.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Adversarial machine learning
• Model and package supply chain

Related items

• HighCVE-2026-86063: Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow…Similar attack · NVD/CVE Database
• MediumOver 1,500 npm packages exposed by Trusted Publishing validation flawSimilar attack · CSO Online
• InfoSkillScreen: High-Recall Screening of Malicious Agent Skills with Decision ModelsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumCVE-2026-108958: TensorLayer HDF5 model loading deserialization via model_config argumentSimilar attack · NVD/CVE Database
• InfoIntroducing Security for AI Coding Agents and Workstations | Endor LabsSimilar attack · Endor Labs Blog