ESA AnomalyMatch before version 1.3.1 contains a deserialization vulnerability where model checkpoint files loaded via torch.load() are not properly restricted. This allows attackers to craft malicious checkpoint files that, when loaded, can execute arbitrary code on the host system. The vulnerability stems from unrestricted deserialization of potentially untrusted input files in session directories. No patch or official remediation has been documented as of the published date.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the system running ESA AnomalyMatch by supplying a malicious model checkpoint file. This could lead to full compromise of the affected system depending on the privileges of the application process. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid loading model checkpoint files from untrusted sources to prevent exploitation. Monitor vendor channels for updates regarding patches or mitigations.