GHSA-xp5q-5q7g-q26r
Ludwig framework is vulnerable to insecure deserialization in its model serving component
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component. When starting a model server with the ludwig serve command, the framework loads model weight files using torch.load() without enabling the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the pickle module. An attacker can exploit this by providing a maliciously crafted PyTorch model file, leading to arbitrary code execution on the system hosting the Ludwig model server.
References
External links from the advisory. They lead to third-party sites.