Report: CVE-2026-10042 - manga-image-translator RCE via Unsafe Pickle Deserialization in Share Model - Complete Guide
CVE ID :CVE-2026-10042 Published : May 29, 2026, 2:29 p.m. | 17 minutes ago Description :manga-image-translator contains a remote code execution vulnerability in the shared API server mode due to unsafe deserialization of untrusted pickle data in the share.py module, where the /execute/{method_name} and /simple_execute/{method_name} endpoints deserialize attacker-controlled HTTP request bodies using pickle.loads(). A remote attacker can supply a crafted pickle payload to these endpoints to execute arbitrary code in the server process, resulting in full container compromise when running in the default Docker deployment as root. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...