Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loaders such as stanza.models.common.pretrain.Pretrain.load() attempt torch.load(..., weights_only=True) but fall back to torch.load(..., weights_only=False) on attacker-controllable pickle.UnpicklingError, allowing a malicious .pt pretrain or model file to execute arbitrary pickle code when a Stanza NLP pipeline loads it. This issue is fixed in version 1.12.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 Stanza, Remote Code Execution via Unsafe Pickle Deserialization, #CVE-2026-54499 (Critical) -DC-Jun2026-513 https://dailycve.com/stanza-remote-code-execution-via-unsafe-pickle-deserialization-cve-2026-54499-critical-dc-jun2026-513/
Post summary
The text announces a critical remote code execution vulnerability in Stanza, specified as CVE-2026-54499, with details described as unsafe pickle deserialization.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | stanford | stanza | - | python | - |