CVE-2026-120833: labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch

Published Nov 3, 2026

Updated

labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and readrelational() that passes any file with a .p or .pickle extension to pandas.readpickle based on the extension alone. Attackers who supply a crafted data file or relational data archive can execute arbitrary code when a user loads it with these functions.

Event History

Nov 3, 2026

CVE Published

via OSV·12:13 AM

Data Sourced

via OSV·12:13 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to exploitation?

Users of labbench versions before 0.46.1 are exposed when they load attacker-supplied data files or relational data archives through read() or read_relational(). Exploitation requires the user to load a file with a .p or .pickle extension.

Does exploitation require authentication or a remote service endpoint?

No authentication is required, but the attack requires user interaction: a user must load the crafted file. The issue is local in scope because code execution occurs in the environment running the affected function.

What should teams do if they cannot update immediately?

Do not load untrusted .p or .pickle files, including relational data archives from untrusted sources, using read() or read_relational(). Restrict accepted input formats to trusted non-pickle data until upgrading to 0.46.1 or later.

CVE-2026-120833: labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch

Event History

Frequently Asked Questions

Who is exposed to exploitation?

Does exploitation require authentication or a remote service endpoint?

What should teams do if they cannot update immediately?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to exploitation?

Does exploitation require authentication or a remote service endpoint?

What should teams do if they cannot update immediately?