CVE-2026-112100
Received Received - Intake

Code Injection in DeepPavlov up to 1.7.0

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulDB

Description
A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.__init__ of the file deeppavlov/models/preprocessors/multitask_preprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112100
EUVD
EUVD-2026-104138

Affected Vendors & Products

Showing 8 associated CPEs
Vendor Product Version / Range
n/a DeepPavlov 1.0
n/a DeepPavlov 1.1
n/a DeepPavlov 1.2
n/a DeepPavlov 1.3
n/a DeepPavlov 1.4
n/a DeepPavlov 1.5
n/a DeepPavlov 1.6
n/a DeepPavlov 1.7.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-112100 is a Python code injection vulnerability in DeepPavlov versions 1.2.0 through 1.7.0. It occurs in the multitask_pipeline_preprocessor component where the preprocessor field in the configuration is evaluated using Python's eval() function without proper validation. This allows attackers to inject arbitrary code through a model's config.json file, which executes during model initialization.

Detection Guidance

Check DeepPavlov versions 1.2.0 through 1.7.0 for the vulnerable multitask_pipeline_preprocessor component. Inspect config.json files for use of eval() in preprocessor fields. Look for unexpected file writes or processes spawned by DeepPavlov model initialization.

Impact Analysis

An attacker can achieve arbitrary code execution in the victim process even with a model package containing only configuration files and tokenizer data. The injected code runs silently before normal model operations continue, with no errors or warnings. This could lead to unauthorized file access, data exfiltration, or further system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's security requirements for protected health information. Organizations using affected DeepPavlov versions may face compliance breaches, legal liabilities, and potential regulatory penalties due to insufficient safeguards against code injection.

Mitigation Strategies

Upgrade DeepPavlov to a patched version if available. Remove eval() calls in multitask_preprocessor.py and replace with safe alternatives like cls_from_str(). Restrict model configuration file access to prevent unauthorized modifications.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112100. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart