Code Injection in DeepPavlov Config Resolver

Executive Summary

CVE-2026-112098 is a code injection vulnerability in DeepPavlov up to version 1.7.0. It occurs in the resolve function of deeppavlov/core/common/params.py where the config reference resolver uses an unrestricted Python eval() function to process strings starting with '#ref'. This allows attackers to execute arbitrary code by referencing built-in functions through the resolver's module globals, such as importing modules or writing files. The attack can be launched remotely via malicious config files without triggering errors or logs.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect DeepPavlov configs for strings starting with '#ref' that are passed to eval() in deeppavlov/core/common/params.py. Check for unexpected file writes or module imports during model building. Use commands like grep -r "#ref" /path/to/deeppavlov/ to search for suspicious references.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows remote attackers to execute arbitrary code on systems running vulnerable DeepPavlov versions. Impacted users include those using DeepPavlov for NLP tasks like chatbots or dialog systems. The attack can silently compromise systems by writing files or installing malware during normal model building operations. Since the payload can be disguised as a normal config parameter, detection is difficult without inspecting config files.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by enabling unauthorized code execution and data access. GDPR requires protecting personal data from unauthorized processing, while HIPAA mandates safeguards for protected health information. A successful exploit could result in data breaches, unauthorized data exfiltration, or system compromise, violating these regulations and potentially leading to legal penalties and reputational damage.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade DeepPavlov to a patched version if available. As a temporary fix, replace eval() with getattr() in params.py and validate reference expressions. Remove write permissions from users running DeepPavlov processes. Monitor for unexpected file writes or network connections.

Useful 0 Not Useful 0