Deserialization Vulnerability in DLR-RM stable-baselines3 by DLR-RM

CVE-2026-94093

What is CVE-2026-94093?

A security flaw has been identified in DLR-RM's stable-baselines3, affecting versions up to 2.9.0. Vulnerability arises in the file save_util.py within the functions PPO.load, load_replay_buffer, and VecNormalize.load, which handle deserialization improperly. This weakness allows attackers to exploit the system remotely, as the insecure deserialization can lead to unauthorized access and manipulation. Although an attempt was made to harden the load path in v2.9.0, subsequent changes reverted the hardening and left core APIs exploitable. The issue underscores a significant concern for users, as no safe mode is implemented, increasing the risk of exploitation.

References