CVE-2026-31237 Ludwig framework is vulnerable to insecure deserialization through its predict() method.
A remote attacker can execute arbitrary code by providing a malicious pickle file to the predict method in the Ludwig framework.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-31237?
CVE-2026-31237 is a critical unsafe deserialization vulnerability in n/a, published on 12 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method. When a user provides a dataset file path to the predict() method, the framework automatically determines the file format. If the file is a pickle (.pkl) file, it is loaded using pandas.read_pickle() without any validation or security restrictions. This allows the deserialization of arbitrary Python objects via the unsafe pickle module. A remote attacker can exploit this by providing a maliciously crafted pickle file, leading to arbitrary code execution on the system running the Ludwig prediction.
Weakness: CWE-502
Which versions are affected by CVE-2026-31237?
3 open source packages ship an affected version, including ludwig.
| Package | Affected | Fixed in |
|---|---|---|
ludwig PyPI | All versions to 0.10.4 | None |
ludwig PyPI | All versions to 0.10.4 | None |
ludwig PyPI | All versions to 0.10.4 | None |
How do I fix CVE-2026-31237?
No fix has been published for CVE-2026-31237 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2026-31237 being exploited?
There is no known exploitation of CVE-2026-31237 in the wild and no public exploit code.
Sources
Also known as GHSA-wcr3-gm9f-f87q, PYSEC-2026-404.