PT-2026-84300

CVE-2026-84202

Published

2026-09-01

Updated

2026-09-10

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ModelScope versions prior to 1.40.1

Description ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files. This allows arbitrary code execution through Python object construction tags, enabling attackers to craft malicious model repositories with poisoned configuration files that execute code when loaded by users.

Recommendations Update ModelScope to version 1.40.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Michael Holmquist

Vancir

Vendors

Affected products

Weakness enumeration

CWE-502: Deserialization of Untrusted Data