high · CVSS v3 6.3 · CVSS v4 5.3 · EPSS 0.00337

CVE-2026-112081

A deserialization flaw in HanLP’s load function allows remote attackers to supply a crafted classpath argument, potentially leading to arbit

Overview

A deserialization flaw in HanLP’s load function allows remote attackers to supply a crafted classpath argument, potentially leading to arbitrary code execution. The issue affects all versions up to 2.1.0-beta.64 and can be triggered via network interfaces. It has been publicly disclosed and remains unpatched.

Description

A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plugins/hanlp_common/hanlp_common/reflection.py of the component Model Config Loading. This manipulation of the argument classpath causes deserialization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Impact

Confidentiality: potential disclosure of sensitive data. Integrity: arbitrary code execution could modify data. Availability: service disruption. Impacted parties: organizations using HanLP for NLP tasks, especially those exposing the load API over the network.

Remediation

Upgrade to HanLP 2.1.0-beta.65 or later where the load function validates classpath. If upgrade not possible, disable external load calls, restrict network access to the service, whitelist allowed classpaths, or apply a firewall rule to block remote access to the load endpoint. Monitor logs for suspicious classpath parameters.

Risk context

High severity (CVSS 6.3) with low EPSS (0.00337) indicates a moderate likelihood of exploitation but significant impact if exploited. Defenders should treat this as a high-priority vulnerability.

Affected products

  • hankcs HanLP 2.x
  • hankcs HanLP 2.1.0-beta.64

Scores

Severity
high
CVSS v2
7.5
CVSS v3
6.3
CVSS v4
5.3
EPSS
0.00337

deserialization remote-code-execution HanLP NLP high-severity patch-needed network-exposure

← All CVEs

Related CVEs

high

CVE-2026-112107

A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument data_offsets causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

View analysis

high

CVE-2026-108121

CVE-2026-108121 is a high‑severity flaw in SME Server 11.0rc1‑215 that lets a privileged user inject Apache directives during domain creation. The injected directives corrupt httpd.conf, causing Apache to fail to start after reboot and leading to a denial‑of‑service of the web server and its virtual hosts. The issue is exploitable only by users with high privileges on the host.

View analysis

high

CVE-2026-112082

The CVE-2026-112082 vulnerability affects the SGLang library (up to version 0.5.19) in the Expert‑Distribution Recording Endpoint. It allows remote attackers to trigger a denial‑of‑service by manipulating the Scheduler.expert_distribution_handle function. The flaw is publicly documented and the fix is pending merge.

View analysis

high

CVE-2026-112086

ESPnet up to version 202610.post2 contains a deserialization flaw in the build_model function of inference_model.py. An attacker can manipulate the _target_ argument to trigger arbitrary code execution remotely. A public patch (f217b24f06de55e332cab10231469d5890dbbe00) is available.

View analysis