CVE-2026-31229 - Vulnerability Analysis

Overview

Adversarial Robustness Toolbox (ART) <= 1.20.1 contains an insecure deserialization vulnerability caused by unsafe use of torch.load() without weights_only=True in Kubeflow model loading, letting attackers execute arbitrary code remotely by supplying malicious model files.

Severity & Score

Impact

Attackers can execute arbitrary code remotely by loading malicious model files, potentially leading to full system compromise.

Mitigation

Update to the latest version of Adversarial Robustness Toolbox (ART) that enforces secure deserialization.

References

• https://github.com/Trusted-AI/adversarial-robustness-toolbox
• https://www.notion.so/CVE-2026-31229-35d1e13931888172863dcc20beeb6b70

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner