CVE-2026-54499

Summary

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loaders such as stanza.models.common.pretrain.Pretrain.load() attempt torch.load(…, weights_only=True) but fall back to torch.load(…, weights_only=False) on attacker-controllable pickle.UnpicklingError, allowing a malicious .pt pretrain or model file to execute arbitrary pickle code when a Stanza NLP pipeline loads it. This issue is fixed in version 1.12.2.

Affected Software

VendorProductVersion RangeStatus
stanfordnlpstanza< 1.12.2affected

Weaknesses

  • CWE-502: CWE-502: Deserialization of Untrusted Data
  • CWE-676: CWE-676: Use of Potentially Dangerous Function

References