---
id: CVE-2026-84202
title: >-
  ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration
  files, allowing arbitrary code execution through Python object construction
  tags
summary: >-
  ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration
  files, allowing arbitrary code execution through Python object construction
  tags. Attackers can craft malicious model repositories with poisoned
  configuration files…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-502
published: '2026-09-01'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T20:18:59.270'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-84202'
references:
  - url: 'https://github.com/modelscope/modelscope'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/modelscope/modelscope/blob/v1.40.0/modelscope/models/audio/tts/voice.py
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/modelscope/modelscope/blob/v1.40.0/modelscope/models/multi_modal/mplug/configuration_mplug.py
    label: disclosure@vulncheck.com
  - url: 'https://github.com/modelscope/modelscope/issues/1660'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/modelscope-through-1.40.0-unsafe-yaml-deserialization-in-model-config-loading
    label: disclosure@vulncheck.com
  - url: 'https://github.com/modelscope/modelscope/issues/1660'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00371
epssPercentile: 0.30979
ingestedAt: '2026-09-08T21:11:12.289Z'
---

## Overview

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.