PYSEC-2026-404
Ludwig framework is vulnerable to insecure deserialization through its predict() method.
Details
The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method. When a user provides a dataset file path to the predict() method, the framework automatically determines the file format. If the file is a pickle (.pkl) file, it is loaded using pandas.read_pickle() without any validation or security restrictions. This allows the deserialization of arbitrary Python objects via the unsafe pickle module. A remote attacker can exploit this by providing a maliciously crafted pickle file, leading to arbitrary code execution on the system running the Ludwig prediction.
Are you affected?
Enter the version of the package you're using.
Affected packages
0No fixed version published yet for ludwig (pip). Pin to a known-safe version or switch to an alternative.