labbench auto-loads pickle files, allowing arbitrary code execution
A Python lab tool can let bad files hack your PC.
Summary
labbench is a Python library for lab data files. Loading a crafted .p or .pickle file with read() or read_relational() lets an attacker run arbitrary code.
Affected when
- a user loads a crafted .p or .pickle file with read() or read_relational()
What to do
Update to 0.46.1 or later. From 0.46.1, .p/.pickle files are refused unless the LABBENCH_AUTOLOAD_PICKLE environment variable is set.
Products and platforms
CVE IDs
Sources
- Advisory: github.com (opens in a new tab)
- Write-up: github.com (opens in a new tab) · vulncheck.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen