Deserialization of untrusted data in labbench read() enables code execution
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-502.
Summary
labbench before 0.46.1 contains a deserialization of untrusted data flaw (CWE-502) in read() and read_relational(). These functions pass any file with a .p or .pickle extension to pandas.read_pickle based on the extension alone. An attacker who supplies a crafted data file or relational data archive can execute arbitrary code when a user loads it with these functions.
Written with Claude Haiku 5.5 from the sources below · 2026-11-03
Description from the CNA
labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that passes any file with a .p or .pickle extension to pandas.read_pickle based on the extension alone. Attackers who supply a crafted data file or relational data archive can execute arbitrary code when a user loads it with these functions.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
Remediation
Update labbench to version 0.46.1, which fixes the issue.
Written with Claude Haiku 5.5 from the sources below · 2026-11-03
- Fix · CNA labbench (NIST) Fixed in 0.46.1
Timeline
- 2026-11-03 Threatist record created from CVE-2026-120833
- 2026-11-03 Alias added: GHSA-4ppf-9g5f-q8hv
- 2026-11-04 Priority changed: MEDIUM → LOW
References
Sources
- CVE-2026-120833 · CVE Program
- CVE-2026-120833 · NVD
- FIRST EPSS
- GHSA-4ppf-9g5f-q8hv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences