CVE-2026-31239

The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from HuggingFace Hub. The MambaLMHeadModel.from_pretrained() method uses torch.load() to load the pytorch_model.bin weight file without enabling the security-restrictive weights_only=True parameter. This allows the deserialization of arbitrary Python objects via the pickle module. An attacker can exploit this by publishing a malicious model repository on HuggingFace Hub. When a victim loads a model from this repository, arbitrary code is executed on the victim's system in the context of the mamba process.

• CWE-502

• https://github.com/state-spaces/mamba
• https://www.notion.so/CVE-2026-31239-35d1e1393188810d9baedfbd8363f396

Published

May 12, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31233Guardrails AI thru 0.6.7 contains a code injection vulnerabi…9.8
• CVE-2026-31234Horovod thru 0.28.1 contains an insecure deserialization vul…9.8
• CVE-2026-31235The imgaug library thru 0.4.0 contains an insecure deseriali…9.8
• CVE-2026-31236The llm CLI tool thru 0.27.1 contains a critical code inject…9.8
• CVE-2026-31237The Ludwig framework thru 0.10.4 is vulnerable to insecure d…9.8
• CVE-2026-31238The Ludwig framework thru 0.10.4 is vulnerable to insecure d…9.8
• CVE-2026-3124The Download Monitor plugin for WordPress is vulnerable to I…7.5
• CVE-2026-31240The mem0 1.0.0 server lacks authentication and authorization…7.5
• CVE-2026-31241The mem0 1.0.0 server lacks authentication and authorization…6.5
• CVE-2026-31242The mem0 v1.0.0 server lacks authentication and authorizatio…9.1
• CVE-2026-31243The mem0 1.0.0 server lacks authentication and authorization…6.5
• CVE-2026-31244The mem0 1.0.0 server lacks authentication and authorization…6.5