CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120833
HIGHCVSS 7.8NVD feed
Published 3 November 2026 · tracked since 3 November 2026
Description
labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that passes any file with a .p or .pickle extension to pandas.read_pickle based on the extension alone. Attackers who supply a crafted data file or relational data archive can execute ar
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-121443 MEDIUM 5.3
- CVE-2026-121444 HIGH 7.5
- CVE-2026-121435 MEDIUM 4.3
- CVE-2026-121436 HIGH 7.2
- CVE-2026-121417 HIGH 7.8
- CVE-2026-121392 HIGH 7.4
- CVE-2026-118527 MEDIUM 4.3
- CVE-2026-106991 HIGH 7.1
- CVE-2026-119742 HIGH 7.2
- CVE-2026-119179 HIGH 7