The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate Python classes during deserialization.
CVSS 4.0HIGH 8.4·Local·No auth·User interaction·EPSS 0.00256·Published 2026-05-01·Fixed in 26.1.2CWE-502