Skip to content
OpenAdvisories
High · 7.8 CVE-2026-102739 EUVD-2026-117576

ESPectre: Unsafe Deserialization on .npz dataset leads to Code Execution

Published Nov 5, 2026 · Updated Nov 9, 2026 · Assigned by GitHub_M

Description

ESPectre is a Wi-Fi motion sensing platform for ESP32. Prior to 3.0.0-rc1, Micro-ESPectre analysis tools, including tools/6_optimize_filter_params.py, tools/1_analyze_raw_data.py, and tools/10_train_ml_model.py, load NPZ datasets with NumPy pickle support enabled through micro-espectre/tools/csi_utils.py and a direct loader. A malicious dataset contributor or pull-request author can place an object-typed array in a .npz file under micro-espectre/data, causing pickle-controlled code to execute as the maintainer or developer when a documented analysis tool accesses the field. This issue is fixed in version 3.0.0-rc1.

Affected products

VendorProductAffectedFixed
francescopace espectre < 3.0.0-rc1 —

References