Vulnerability · Published Nov 3, 2026 · Assigned by VulnCheck
CVE-2026-120833labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch
High 7.8
In plain English
A high-severity unsafe deserialization in labbench from NIST. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 96.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that passes any file with a .p or .pickle extension to pandas.read_pickle based on the extension alone. Attackers who supply a crafted data file or relational data archive can execute arbitrary code when a user loads it with these functions.
Affected products (as reported)
Weakness: CWE-502 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- GitHub Pull Request #32 patch, issue-tracking
- Patch Commit patch
- https://github.com/usnistgov/labbench/blob/0.46.0/src/labbench/_data.py#L1664-L1666 technical-description
- labbench ChangeLog release-notes
- https://pypi.org/project/labbench/0.46.1/ product
- https://github.com/usnistgov/labbench product
- VulnCheck Advisory: labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch third-party-advisory