CVE-2026-112145

Name of the Vulnerable Software and Affected Versions speaches-ai speaches versions prior to 0.9.0-rc.3

Description An issue exists in the Pyannote Diarization Model Loading component within the function PyannoteDiarizationModelManager. load fn located in the file src/speaches/executors/pyannote diarization.py. Manipulation of the model argument allows an attacker to use externally-controlled input to select classes or code, which can be triggered remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the PyannoteDiarizationModelManager. load fn function to minimize the risk of exploitation.