Remote Code Execution in kedro-org/kedro
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-502.
Summary
A Remote Code Execution (RCE) vulnerability has been identified in the Kedro ShelveStore class (version 0.19.8). This vulnerability allows an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full system compromise. The ShelveStore class uses Python's shelve module to manage session data, which relies on pickle for serialization. Crafting a malicious payload and storing it in the shelve file can lead to RCE when the payload is deserialized.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| backstage | kedro-org/kedro | before 0.19.9 | 0.19.9 | Patch available | CNA |
| — | kedro (PyPI) | before 0.19.9 | 0.19.9 | Patch available | GHSA-747f-ww56-4q4h |
- kedro-org/kedro Vendorbackstage Affected before 0.19.9 Fixed in 0.19.9 Patch available CNA
- kedro (PyPI) Vendor— Affected before 0.19.9 Fixed in 0.19.9 Patch available GHSA-747f-ww56-4q4h
Remediation
- Fix · CNA kedro-org/kedro (kedro-org) Fixed in 0.19.9
- Fix · GHSA-747f-ww56-4q4h kedro (PyPI) Fixed in 0.19.9 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2024-9701
- 2026-10-03 Alias added: GHSA-747f-ww56-4q4h
References
Other 5
- https://huntr.com/bounties/96c77fef-93b2-4d4d-8cbe-57a718d8eea5
- https://github.com/kedro-org/kedro/commit/d79fa51de55ac0ccb58cce1a482df1b445f0fe7c
- https://github.com/kedro-org/kedro/commit/66e5e074b2789469550370f370c8b486f638d975
- https://github.com/kedro-org/kedro
- https://github.com/pypa/advisory-database/tree/main/vulns/kedro/PYSEC-2026-367.yaml
More backstage vulnerabilities
- TI-2026-33119 Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys KEVCVSS 3.1CRITICAL 9.6
- TI-2018-10499 Integer overflow in backstage kernel KEVCVSS 3.0HIGH 7.8
- TI-2023-12294 Dragonfly2 vulnerable to hard coded cyptographic key CVSS 3.1CRITICAL 9.8
- TI-2021-12074 Authentication vulnerability in MOSN v.0.23.0 allows attacker to escalate privileges via… CVSS 3.1CRITICAL 9.8
- TI-2019-04061 runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows… CVSS 3.1HIGH 8.6
- TI-2026-20034 Podman Desktop Extension System Vulnerable to Authentication Bypass CVSS 4.0HIGH 8.8
Sources
- CVE-2024-9701 · CVE Program
- CVE-2024-9701 · NVD
- FIRST EPSS
- GHSA-747f-ww56-4q4h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences