high8.8
CVE-2026-31222
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class.
Impact
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class. The method loads model checkpoint files using torch.load() without enabling the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted model file, leading to arbitrary code execution on the victim's system when the file is loaded via the vulnerable method.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | snorkel | <= 0.10.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snorkel | Snorkel | through 0.10.0 |