CVE-2026-116103 | Sony Neural Network Libraries up to 1.39.0 Encode Param Command encode_decode_param.py load_param_in_txt code injection

October 25, 2026 Yanac

A vulnerability labeled as critical has been found in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the component Encode Param Command Handler. Such manipulation leads to code injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is referenced as CVE-2026-116103. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More