speaches-ai speaches up to 0.9.0-rc.3 Pyannote Diarization Model Loading pyannote_diarization.py PyannoteDiarizationModelManager._load_fn model externally-controlled input to select classes or code

Summaryinfo

A vulnerability labeled as critical has been found in speaches-ai speaches up to 0.9.0-rc.3. This issue affects the function PyannoteDiarizationModelManager._load_fn of the file src/speaches/executors/pyannote_diarization.py of the component Pyannote Diarization Model Loading. The manipulation of the argument model results in use of externally-controlled input to select classes or code. This vulnerability is known as CVE-2026-112145. It is possible to launch the attack remotely. Furthermore, an exploit is available. The feature was introduced in PR #628 (feat/switch to pyannote audio), merged as commit 870e1e16a73452496e99d49f759eabd692a8e0e0. The project was informed of the problem early through an issue report but has not responded yet.

Detailsinfo

A vulnerability was found in speaches-ai speaches up to 0.9.0-rc.3. It has been classified as critical. Affected is the function PyannoteDiarizationModelManager._load_fn of the file src/speaches/executors/pyannote_diarization.py of the component Pyannote Diarization Model Loading. The manipulation of the argument model with an unknown input leads to a use of externally-controlled input to select classes or code vulnerability. CWE is classifying the issue as CWE-470. The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code. This is going to have an impact on confidentiality, integrity, and availability.

The advisory is available at github.com. This vulnerability is traded as CVE-2026-112145. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details and a public exploit are known.

The exploit is shared for download at github.com. It is declared as proof-of-concept. The project was informed of the problem early through an issue report but has not responded yet. The feature was introduced in PR #628 (feat/switch to pyannote audio), merged as commit 870e1e16a73452496e99d49f759eabd692a8e0e0.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• speaches-ai

Name

• speaches

Version

• 0.9.0-rc.0
• 0.9.0-rc.1
• 0.9.0-rc.2
• 0.9.0-rc.3

Website

• Product: https://github.com/speaches-ai/speaches/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #1013214: speaches-ai Speaches git master 2026-04-18 (commit 993994f) Unsafe Reflection (by Dem0000000)

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion