TI-2024-04831 Aliases CVE-2024-5206 GHSA-jw8x-6495-233v

Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn

MEDIUM 55CWE-921Published 2024-06-06 · Updated 2024-08-01

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: High
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Partial Red Hat: 1 fixed, 3 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-922.

Summary

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the `stop_words_` attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the `stop_words_` attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00189 8th percentileScored 2026-11-07

Fix Partial scikit-learn/scikit-learn (scikit-learn): 1.5.0scikit-learn (PyPI): 1.5.0Red Hat: 1 advisoryRed Hat: 1 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
scikit-learn	scikit-learn/scikit-learn	before 1.5.0	1.5.0	Patch available	CNA
—	scikit-learn (PyPI)	before 1.5.0	1.5.0	Patch available	GHSA-jw8x-6495-233v

scikit-learn/scikit-learn Vendorscikit-learn Affected before 1.5.0 Fixed in 1.5.0 Patch available CNA
scikit-learn (PyPI) Vendor— Affected before 1.5.0 Fixed in 1.5.0 Patch available GHSA-jw8x-6495-233v

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:scikit-learn:scikit-learn::::::python::*	before 1.5.0	Vulnerable	scikit-learn

cpe:2.3:a:scikit-learn:scikit-learn:*:*:*:*:*:python:*:* Versions before 1.5.0 Vulnerable ·scikit-learn

Remediation

Fix · CNA scikit-learn/scikit-learn (scikit-learn) Fixed in 1.5.0
Fix · GHSA-jw8x-6495-233v scikit-learn (PyPI) Fixed in 1.5.0 Advisory →

Red Hat 1 advisory

RHSA-2026:83548 Released 2026-10-15 · Red Hat rating Important
Red Hat Ceph Storage
- Red Hat Ceph Storage 7.1 registry.redhat.io/rhceph/grafana-rhel9, registry.redhat.io/rhceph/rhceph-7-rhel9

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Ceph Storage 7	Affected	No fix yet
Red Hat Ceph Storage 8	Affected	No fix yet
Red Hat Ceph Storage 9	Affected	No fix yet
Red Hat Ceph Storage 7.1	Fixed	RHSA-2026:83548

Not affected: 3 products

Red Hat Ansible Automation Platform 2
Red Hat Ceph Storage 7.1
Red Hat Ceph Storage 8

Timeline

2026-10-02 Threatist record created from CVE-2024-5206
2026-10-03 Alias added: GHSA-jw8x-6495-233v
2026-10-16 Fix available: RHSA-2026:83548 · Red Hat
2026-10-16 Fix available: Red Hat Ceph Storage 7.1 · Red Hat

References

Patch 1

https://github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8

Advisory 2

Other 2

TI-2020-17498 svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other… CVSS 3.1HIGH 7.5
TI-2020-10297 scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an… CVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences