{ "affected": [ { "ranges": [ { "database_specific": { "extracted_events": [ { "range": [ { "introduced": "2.1.0-beta.0" }, { "last_affected": "2.1.0-beta.0" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "2.1.0-beta.6" }, { "last_affected": "2.1.0-beta.6" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "2.1.0-beta.62" }, { "last_affected": "2.1.0-beta.62" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" } ] }, "events": [ { "introduced": "e8044b27ae1de54b9070db08549853d3ca8271e2" }, { "last_affected": "5008d7b27295167ccfad0348c925b7349644ecf0" } ], "repo": "https://github.com/hankcs/hanlp", "type": "GIT" } ], "versions": [ "2.1.0-beta.0", "2.1.0-beta.6" ] } ], "database_specific": { "cna_assigner": "VulDB", "cwe_ids": [ "CWE-20", "CWE-502" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112079.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "introduced": "2.1.0-beta.1" }, { "last_affected": "2.1.0-beta.1" }, { "introduced": "2.1.0-beta.2" }, { "last_affected": "2.1.0-beta.2" }, { "introduced": "2.1.0-beta.3" }, { "last_affected": "2.1.0-beta.3" }, { "introduced": "2.1.0-beta.4" }, { "last_affected": "2.1.0-beta.4" }, { "introduced": "2.1.0-beta.5" }, { "last_affected": "2.1.0-beta.5" }, { "introduced": "2.1.0-beta.7" }, { "last_affected": "2.1.0-beta.7" }, { "introduced": "2.1.0-beta.8" }, { "last_affected": "2.1.0-beta.8" }, { "introduced": "2.1.0-beta.9" }, { "last_affected": "2.1.0-beta.9" }, { "introduced": "2.1.0-beta.10" }, { "last_affected": "2.1.0-beta.10" }, { "introduced": "2.1.0-beta.11" }, { "last_affected": "2.1.0-beta.11" }, { "introduced": "2.1.0-beta.12" }, { "last_affected": "2.1.0-beta.12" }, { "introduced": "2.1.0-beta.13" }, { "last_affected": "2.1.0-beta.13" }, { "introduced": "2.1.0-beta.14" }, { "last_affected": "2.1.0-beta.14" }, { "introduced": "2.1.0-beta.15" }, { "last_affected": "2.1.0-beta.15" }, { "introduced": "2.1.0-beta.16" }, { "last_affected": "2.1.0-beta.16" }, { "introduced": "2.1.0-beta.17" }, { "last_affected": "2.1.0-beta.17" }, { "introduced": "2.1.0-beta.18" }, { "last_affected": "2.1.0-beta.18" }, { "introduced": "2.1.0-beta.19" }, { "last_affected": "2.1.0-beta.19" }, { "introduced": "2.1.0-beta.20" }, { "last_affected": "2.1.0-beta.20" }, { "introduced": "2.1.0-beta.21" }, { "last_affected": "2.1.0-beta.21" }, { "introduced": "2.1.0-beta.22" }, { "last_affected": "2.1.0-beta.22" }, { "introduced": "2.1.0-beta.23" }, { "last_affected": "2.1.0-beta.23" }, { "introduced": "2.1.0-beta.24" }, { "last_affected": "2.1.0-beta.24" }, { "introduced": "2.1.0-beta.25" }, { "last_affected": "2.1.0-beta.25" }, { "introduced": "2.1.0-beta.26" }, { "last_affected": "2.1.0-beta.26" }, { "introduced": "2.1.0-beta.27" }, { "last_affected": "2.1.0-beta.27" }, { "introduced": "2.1.0-beta.28" }, { "last_affected": "2.1.0-beta.28" }, { "introduced": "2.1.0-beta.29" }, { "last_affected": "2.1.0-beta.29" }, { "introduced": "2.1.0-beta.30" }, { "last_affected": "2.1.0-beta.30" }, { "introduced": "2.1.0-beta.31" }, { "last_affected": "2.1.0-beta.31" }, { "introduced": "2.1.0-beta.32" }, { "last_affected": "2.1.0-beta.32" }, { "introduced": "2.1.0-beta.33" }, { "last_affected": "2.1.0-beta.33" }, { "introduced": "2.1.0-beta.34" }, { "last_affected": "2.1.0-beta.34" }, { "introduced": "2.1.0-beta.35" }, { "last_affected": "2.1.0-beta.35" }, { "introduced": "2.1.0-beta.36" }, { "last_affected": "2.1.0-beta.36" }, { "introduced": "2.1.0-beta.37" }, { "last_affected": "2.1.0-beta.37" }, { "introduced": "2.1.0-beta.38" }, { "last_affected": "2.1.0-beta.38" }, { "introduced": "2.1.0-beta.39" }, { "last_affected": "2.1.0-beta.39" }, { "introduced": "2.1.0-beta.40" }, { "last_affected": "2.1.0-beta.40" }, { "introduced": "2.1.0-beta.41" }, { "last_affected": "2.1.0-beta.41" }, { "introduced": "2.1.0-beta.42" }, { "last_affected": "2.1.0-beta.42" }, { "introduced": "2.1.0-beta.43" }, { "last_affected": "2.1.0-beta.43" }, { "introduced": "2.1.0-beta.44" }, { "last_affected": "2.1.0-beta.44" }, { "introduced": "2.1.0-beta.45" }, { "last_affected": "2.1.0-beta.45" }, { "introduced": "2.1.0-beta.46" }, { "last_affected": "2.1.0-beta.46" }, { "introduced": "2.1.0-beta.47" }, { "last_affected": "2.1.0-beta.47" }, { "introduced": "2.1.0-beta.48" }, { "last_affected": "2.1.0-beta.48" }, { "introduced": "2.1.0-beta.49" }, { "last_affected": "2.1.0-beta.49" }, { "introduced": "2.1.0-beta.50" }, { "last_affected": "2.1.0-beta.50" }, { "introduced": "2.1.0-beta.51" }, { "last_affected": "2.1.0-beta.51" }, { "introduced": "2.1.0-beta.52" }, { "last_affected": "2.1.0-beta.52" }, { "introduced": "2.1.0-beta.53" }, { "last_affected": "2.1.0-beta.53" }, { "introduced": "2.1.0-beta.54" }, { "last_affected": "2.1.0-beta.54" }, { "introduced": "2.1.0-beta.55" }, { "last_affected": "2.1.0-beta.55" }, { "introduced": "2.1.0-beta.56" }, { "last_affected": "2.1.0-beta.56" }, { "introduced": "2.1.0-beta.57" }, { "last_affected": "2.1.0-beta.57" }, { "introduced": "2.1.0-beta.58" }, { "last_affected": "2.1.0-beta.58" }, { "introduced": "2.1.0-beta.59" }, { "last_affected": "2.1.0-beta.59" }, { "introduced": "2.1.0-beta.60" }, { "last_affected": "2.1.0-beta.60" }, { "introduced": "2.1.0-beta.61" }, { "last_affected": "2.1.0-beta.61" }, { "introduced": "2.1.0-beta.63" }, { "last_affected": "2.1.0-beta.63" }, { "introduced": "2.1.0-beta.64" }, { "last_affected": "2.1.0-beta.64" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" } ] } ] }, "details": "A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load_word2vec_as_vocab_tensor of the file hanlp/utils/torch_util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.", "id": "CVE-2026-112079", "modified": "2026-10-21T02:31:02.283439766Z", "published": "2026-10-19T04:45:08.929Z", "references": [ { "type": "ADVISORY", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112079.json" }, { "type": "WEB", "url": "https://github.com/hankcs/HanLP/" }, { "type": "REPORT", "url": "https://github.com/hankcs/HanLP/issues/1968" }, { "type": "EVIDENCE", "url": "https://github.com/user-attachments/files/32910161/hanlp-ddb1299-vocab-pickle-poc.zip" }, { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112079" }, { "type": "ADVISORY", "url": "https://vuldb.com/cve/CVE-2026-112079" }, { "type": "ADVISORY", "url": "https://vuldb.com/submit/1009644" }, { "type": "ADVISORY", "url": "https://vuldb.com/vuln/421758" }, { "type": "REPORT", "url": "https://vuldb.com/vuln/421758/cti" } ], "schema_version": "1.9.0", "severity": [ { "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "type": "CVSS_V4" } ], "summary": "hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization" }