CVE-2026-116103
Deferred Deferred - Pending Action

Sony Neural Network Libraries Code Injection Vulnerability

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: VulDB

Description
A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the component Encode Param Command Handler. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-27
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-116103
EUVD
EUVD-2026-109591

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Python code injection vulnerability in Sony Neural Network Libraries (nnabla) up to version 1.39.0. The issue is in the nnabla_cli command-line tool's plain-text parameter encoder. When processing a .txt parameter file, the first line specifying tensor shape is passed directly to Python's eval() function without validation. This allows attackers to execute arbitrary Python and OS commands if they can provide a malicious parameter directory.

Detection Guidance

Check if Sony Neural Network Libraries (nnabla) versions up to 1.39.0 are installed by running commands like 'pip show nnabla' or 'conda list nnabla'. Inspect the file python/src/nnabla/utils/cli/encode_decode_param.py for the vulnerable load_param_in_txt function at line 37.

Impact Analysis

If you use nnabla_cli encode_param or decode_param on untrusted parameter directories, an attacker could execute arbitrary code on your system. This could lead to data theft, system compromise, or further network attacks. The attack is stealthy as it may return a legal shape value while executing malicious payloads.

Compliance Impact

This vulnerability could potentially violate compliance with GDPR and HIPAA due to unauthorized code execution leading to data breaches or unauthorized access. The code injection flaw allows remote attackers to execute arbitrary commands, which may result in unauthorized data exposure or manipulation, directly conflicting with data protection requirements in these regulations.

Mitigation Strategies

Uninstall or upgrade Sony Neural Network Libraries to a version beyond 1.39.0. Avoid using the nnabla_cli encode_param or decode_param commands on untrusted parameter directories. Disable or restrict access to these tools if they are not essential.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116103. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart