PYSEC-2026-405
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/ludwig/PYSEC-2026-405.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-405
- Aliases
-
- CVE-2026-31238
- GHSA-xp5q-5q7g-q26r
- Published
- 2026-06-29T11:50:48.925693Z
- Modified
- 2026-07-01T20:22:56.823984Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Ludwig framework is vulnerable to insecure deserialization in its model serving component
- Details
-
The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component. When starting a model server with the ludwig serve command, the framework loads model weight files using torch.load() without enabling the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the pickle module. An attacker can exploit this by providing a maliciously crafted PyTorch model file, leading to arbitrary code execution on the system hosting the Ludwig model server.
- References
Affected packages
PyPI / ludwig
Package
- Name
- ludwig
- View open source insights on deps.dev
- Purl
- pkg:pypi/ludwig
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedLast affected0.10.4
Affected versions
0.*
0.1.0
0.1.1
0.1.2
0.2
0.2.1
0.2.2
0.2.2.2
0.2.2.3
0.2.2.4
0.2.2.5
0.2.2.6
0.2.2.7
0.2.2.8
0.3
0.3.1
0.3.2
0.3.3
0.4rc1
0.4
0.4.1
0.5rc1
0.5rc2
0.5
0.5.1
0.5.2
0.5.3
0.5.4
0.5.5
0.6
0.6.1
0.6.2
0.6.3
0.6.4
0.7
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.8
0.8.1
0.8.1.post1
0.8.2
0.8.3
0.8.4
0.8.5
0.8.6
0.9
0.9.1
0.9.2
0.9.3
0.10.0
0.10.1
0.10.2
0.10.3
0.10.4