CVE-2026-112145
Deferred Deferred - Pending Action

Speeches AI Pyannote Diarization Model Loading Code Execution

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulDB

Description
A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function PyannoteDiarizationModelManager._load_fn of the file src/speaches/executors/pyannote_diarization.py of the component Pyannote Diarization Model Loading. The manipulation of the argument model leads to use of externally-controlled input to select classes or code. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The feature was introduced in PR #628 (feat/switch to pyannote audio), merged as commit 870e1e16a73452496e99d49f759eabd692a8e0e0. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112145
EUVD
EUVD-2026-104321

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
speaches-ai speaches 0.9.0-rc.0
speaches-ai speaches 0.9.0-rc.1
speaches-ai speaches 0.9.0-rc.2
speaches-ai speaches 0.9.0-rc.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-470 The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the speaches-ai speaches software up to version 0.9.0-rc.3. It specifically affects the Pyannote Diarization Model Loading component, where the function PyannoteDiarizationModelManager._load_fn improperly handles the 'model' argument. This allows an attacker to manipulate the input to select classes or execute arbitrary code remotely.

Detection Guidance

To detect this vulnerability, inspect the Speaches application logs for unusual model loading requests or errors in src/speaches/executors/pyannote_diarization.py. Check for model IDs passed to Pipeline.from_pretrained() that do not match expected patterns. Monitor network traffic for unexpected outbound requests triggered by model metadata processing.

Impact Analysis

An attacker could exploit this to execute malicious code on your system remotely. This could lead to unauthorized access, data theft, or further compromise of your environment. The attack is possible without authentication and requires no user interaction.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection principles and HIPAA's security requirements. Organizations using this software may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Immediately update speaches-ai speaches to a version beyond 0.9.0-rc.3 to address the vulnerability in Pyannote Diarization Model Loading. If an update is not available, consider disabling the affected component or restricting network access to it until a patch is released.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112145. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart