External risk intelligence

Manga Image Translator Unsafe Pickle Deserialization Remote Code Execution

CVE advisorySeverity: CRITICAL (CVSS 9.2)

CVE-2026-10042

The vulnerability exists in an API server mode exposed through specific HTTP endpoints. While it is a specialized tool, the presence of public-facing API endpoints designed for request processing makes it likely to be deployed in a reachable configuration, such as a web service or backend interface, facilitating external access.

Deserialization

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A vulnerability has been identified in the manga-image-translator software when operating in its shared API server mode. This flaw allows for the execution of arbitrary code on the server by sending specially crafted data through specific API endpoints. If the software is deployed using Docker as a root user, this vulnerability could lead to a full compromise of the container.

Unsafe data handling in an API could allow code execution.
This vulnerability can lead to full container compromise.
Confirm relevance and exposure of this specialized tool.

Attack Path

How an attacker could exploit the issue

An attacker can reach the vulnerable component by sending specially crafted HTTP requests to the API server. Since the server accepts untrusted data without proper validation, an attacker can provide a malicious payload. Successful exploitation allows an attacker to execute arbitrary code, potentially leading to a full compromise of the server, especially in default Docker deployments.

Entry condition: Network access to API.
Trigger point: Unsafe pickle deserialization endpoints.
Resulting risk: Arbitrary code execution, container compromise.

Live Threat

Current exploitation, exposure, and threat context

When the manga-image-translator application runs in its shared API server mode, a critical vulnerability allows remote attackers to execute arbitrary code. This occurs when the application insecurely deserializes untrusted data sent via HTTP requests to specific API endpoints. If the application is deployed within a Docker container as the root user, this vulnerability could lead to a full compromise of the container.

Container compromise is at risk.
Attackers exploit unsafe data deserialization.
Full container control may result.

Operational Fix

Recommended remediation, mitigation, and detection steps

The manga-image-translator's remote code execution vulnerability in shared API server mode requires immediate attention from teams managing the application and its underlying infrastructure. The first practical move is to identify all instances of this technology, determine their exposure and criticality, and then assign ownership for remediation planning.

Application and platform teams own the issue.
Verify API reachability and business criticality.
Plan remediation based on assessed risk.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is manga-image-translator and its API server mode?

Manga-image-translator is an open-source tool designed to automate the translation of text within manga images. The shared API server mode is an optional feature that allows multiple users or external systems to submit images and requests to a centralized server, rather than running the translation process locally on a single machine.

What does unsafe deserialization mean for CVE-2026-10042?

This vulnerability involves the CWE-502 weakness class. It occurs when software takes data that an attacker has crafted—in this case, using the Python pickle format—and reconstructs it into an object without verifying its content. Because the pickle module can be instructed to perform actions during this reconstruction, the application unknowingly executes commands hidden inside the malicious data, granting the attacker control over the server process.

How is the vulnerability triggered by an attacker?

An attacker triggers the vulnerability by sending a specially crafted HTTP request to the /execute/ or /simple_execute/ endpoints within the shared API server. The flaw is specifically tied to how these endpoints process incoming request bodies. If the software is running in a mode that does not enable the shared API server, these specific endpoints remain inactive, and this particular path for code execution is not available.

How does Halo Surface Signal assess this risk?

Halo Surface Signal assigns a 'Likely' label because this vulnerability exists within public-facing API endpoints. While manga-image-translator is a niche tool, these endpoints are specifically designed to accept and process network requests. If your instance is reachable over a network, such as being deployed as a web service or backend interface, it is accessible to external actors who could attempt to send malicious payloads.

What should I do if I run manga-image-translator?

Begin by auditing your environment to locate every instance of the software to determine if the shared API server mode is enabled. If you find active deployments, evaluate their network accessibility and business importance to prioritize them. Coordinate with your infrastructure and application teams to restrict access to these API endpoints or plan for security updates, particularly if your container runs with elevated root privileges.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.