CVE-2026-12191
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A vulnerability was found in Comma AI Openpilot 0.11 affecting the function pickle.load/pickle.loads in the file selfdrive/modeld/modeld.py of the Pickle Module. The manipulation results in deserialization, and the attack is only possible with local access.
Risk Assessment
This vulnerability may lead to unauthorized access to data within the system, posing a risk to the integrity and confidentiality of information.
Recommendation
It is recommended to restrict local access to the system and monitor for any unauthorized access attempts.
Original NVD description (English source)
A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdrive/modeld/modeld.py of the component Pickle Module. The manipulation results in deserialization. The attack is only possible with local access. The vendor was contacted early about this disclosure but did not respond in any way.