CVE-2026-102739

HIGH 7.8

ESPectre: Unsafe Deserialization on .npz dataset leads to Code Execution

CVSS Score

7.8

EPSS Score

0.0%

EPSS Percentile

0th

ESPectre is a Wi-Fi motion sensing platform for ESP32. Prior to 3.0.0-rc1, Micro-ESPectre analysis tools, including tools/6_optimize_filter_params.py, tools/1_analyze_raw_data.py, and tools/10_train_ml_model.py, load NPZ datasets with NumPy pickle support enabled through micro-espectre/tools/csi_utils.py and a direct loader. A malicious dataset contributor or pull-request author can place an object-typed array in a .npz file under micro-espectre/data, causing pickle-controlled code to execute as the maintainer or developer when a documented analysis tool accesses the field. This issue is fixed in version 3.0.0-rc1.

CWE	CWE-502
Vendor	francescopace
Product	espectre
Published	Nov 5, 2026

Stay Ahead of the Next One

Get instant alerts for francescopace espectre

Be the first to know when new high vulnerabilities affecting francescopace espectre are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

francescopace / espectre

< 3.0.0-rc1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/francescopace/espectre/security/advisories/GHSA-g96x-h6rg-cqq3 github.com: https://github.com/francescopace/espectre/pull/154 github.com: https://github.com/francescopace/espectre/commit/adf495ceed41840497347f0196ba4a6968fc4ee1 github.com: https://github.com/francescopace/espectre/releases/tag/3.0.0-rc1