CVE-2026-31222

The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class. The method loads model checkpoint files using torch.load() without enabling the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted model file, leading to arbitrary code execution on the victim's system when the file is loaded via the vulnerable method.

CVSS 3.1

8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-25)

CWE

CWE-502

Published

2026-05-12

Modified

2026-10-19

Record from

the NVD, synced 2026-10-21

Affected

• snorkel:snorkel

Packages (OSV)

References

• https://github.com/snorkel-team/snorkel
• https://www.notion.so/CVE-2026-31222-35d1e139318881db8398e0732af8df6d

Check your stackJSON