GHSA-wcr3-gm9f-f87q
Ludwig framework is vulnerable to insecure deserialization through its predict() method.
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method. When a user provides a dataset file path to the predict() method, the framework automatically determines the file format. If the file is a pickle (.pkl) file, it is loaded using pandas.read_pickle() without any validation or security restrictions. This allows the deserialization of arbitrary Python objects via the unsafe pickle module. A remote attacker can exploit this by providing a maliciously crafted pickle file, leading to arbitrary code execution on the system running the Ludwig prediction.
References
External links from the advisory. They lead to third-party sites.