CVE-2026-112081

MediumCVSS 6.3

Published: 19/10/2026(UTC)Updated: 22/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

26th percentile - higher than 26% of all known CVEs

Summary

A vulnerability was found in HanLP up to 2.1.0-beta.64 in the hanlp.load function of reflection.py, related to model config loading. Manipulating the classpath argument causes deserialization, enabling remote attacks. The exploit has been publicly disclosed and the project has not yet responded.

Risk Assessment

The vulnerability may allow a remote attacker to trigger unsafe deserialization, potentially leading to code execution or application compromise. Public disclosure of the exploit increases the risk of exploitation.

Recommendation

Upgrade HanLP to a version newer than 2.1.0-beta.64 once a fix is available, and avoid loading untrusted model configurations. Until then, restrict access to the model loading functionality.

Other vulnerabilities in HanLP

CVE-2026-112079Medium
A vulnerability has been found in hankcs HanLP in the load_word2vec_as_vocab_tensor function of hanlp/utils/torch_util.py. Manipulating the vectors.vocab argument leads to deserialization, and the attack is possible remotely. The exploit has been disclosed to the public and may be used.

Original NVD description (English source)

A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plugins/hanlp_common/hanlp_common/reflection.py of the component Model Config Loading. This manipulation of the argument classpath causes deserialization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS