CVE-2026-10043

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-10043

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10043.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-10043

Published

2026-06-24T21:36:05.969Z

Modified

2026-07-15T01:48:51.014190683Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability

Details

MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MosaicML Composer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of checkpoints. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27990.

Database specific

{
    "cwe_ids": [
        "CWE-502"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10043.json",
    "cna_assigner": "zdi"
}

References

Affected packages

Git / github.com/mosaicml/composer

Affected ranges

Type

GIT

Repo

https://github.com/mosaicml/composer

Events

Introduced

4bfb5fc44b8bbde26b035a43b9311003013a4252

Fixed

6405188805a0054b4551ec49e4919c54c971d0e8

Database specific

{
    "extracted_events": [
        {
            "introduced": "0.32.1"
        },
        {
            "last_affected": "0.32.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

0.*

0.32.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10043.json"