CosyVoice through commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e contains an insecure deserialization vulnerability (CWE-502) in its make_parquet_list.py script. The script loads PyTorch .pt files (utterance embeddings, speaker embeddings, speech tokens) using torch.load() without enabling the weights_only=True security parameter. This allows deserialization of arbitrary Python objects via pickle, enabling arbitrary code execution if an attacker supplies malicious .pt files in the data directory processed by the tool.

An attacker who can supply malicious PyTorch .pt files to the data directory processed by the vulnerable tool can achieve arbitrary code execution on the victim's system. This can lead to confidentiality, integrity, and availability impacts as indicated by the CVSS vector (C:L/I:L/A:L). There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted or unauthenticated PyTorch .pt files with the make_parquet_list.py tool. Consider reviewing the code to enable the weights_only=True parameter in torch.load() to mitigate insecure deserialization risks.