What is CVE-2026-94093?

CVE-2026-94093 is a medium-severity vulnerability in Dlr-Rm Stable-Baselines3, classified under Improper Input Validation. CVSS score: 6.3/10. Published 2026-09-20.

How severe is CVE-2026-94093?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Deserialization in Dlr-Rm Stable-Baselines3

CVE-2026-94093

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/load_replay_buffer/VecNormalize.load of the file save_util.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. In v2.9.0 the PyTorch tensor load path is hardened (weights_only=True), but that hardening was later reverted on master via PR #1913 "Hotfix: revert loading with weights_only=True" [blocked] to fix PyTorch 1.13 compat - so even the one "safe" path is inconsistent across versions. #2281 was closed as a duplicate of #1831 since both are unsafe pickle deserialization - but #1831's fix (PR #41) only gated the Hugging Face Hub loader in the separate huggingface_sb3 package. This finding covers the core stable_baselines3 load APIs (PPO.load, load_replay_buffer, VecNormalize.load), which have no safe mode or gate and remained exploitable in v2.9.0 until the outstanding hardening (PR #2264) ships.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Published 2026-09-20 · last modified 2026-09-21.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L.

EPSS exploit prediction

EPSS: 0.005 (39.3th percentile), scored 2026-11-04.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 39th percentile — 39.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000

Affected products

Dlr-Rm Stable-Baselines3 — versions 2.0, 2.1, 2.2

Weakness classification (CWE)

References

vuldb.com/vuln/408021 (technical-description, vdb-entry)
vuldb.com/vuln/408021/cti (signature, permissions-required)
vuldb.com/cve/CVE-2026-94093 (third-party-advisory)
vuldb.com/submit/952734 (third-party-advisory)
github.com/DLR-RM/stable-baselines3/issues/2281 (issue-tracking)
github.com/DLR-RM/stable-baselines3/ (product)

Frequently asked questions

What is CVE-2026-94093?: CVE-2026-94093 is a medium-severity vulnerability in Dlr-Rm Stable-Baselines3, classified under Improper Input Validation. CVSS score: 6.3/10. Published 2026-09-20.
How severe is CVE-2026-94093?: Medium severity. CVSS v3 base score is 6.3 out of 10.