CVE-2026-73325

Name of the Vulnerable Software and Affected Versions OneCompression library version 1.2.0

Description An unsafe deserialization issue exists when the library processes a crafted model.pt checkpoint file. The function QuantizedModelLoader.load quantized model pt() calls torch.load with the weights only parameter set to False, which triggers Python's pickle machinery. This allows an attacker to embed malicious reduce methods within the checkpoint file to execute arbitrary Python code and system commands when the file is loaded from a directory selected by the caller.

Recommendations For version 1.2.0, avoid loading checkpoint files from untrusted sources or directories until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.