PT-2026-57616 · Yzhao062 · Pyod

Dem0000000 · Publicado 2026-07-13 · Atualizado 2026-07-13 · CVE-2026-15529

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The pull request to fix this issue requires some minor changes.

Correção

RCE

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-20

CWE-502

Identificadores relacionados

CVE-2026-15529

Produtos afetados

Pyod

Referências · 8

• https://github.com/yzhao062/pyod/pull/698 · Correção
• https://github.com/yzhao062/pyod/issues/697 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15529 · Nota de Segurança
• https://github.com/yzhao062/pyod · Nota
• https://vuldb.com/cve/CVE-2026-15529 · Nota
• https://vuldb.com/vuln/377872/cti · Nota
• https://vuldb.com/submit/854559 · Nota
• https://vuldb.com/vuln/377872 · Nota