PT-2025-12291 · Kedro · Kedro

Published 2025-03-20 · Updated 2025-03-21 · CVE-2024-9701

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kedro version 0.19.8

Description A Remote Code Execution (RCE) issue has been identified, allowing an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full system compromise. The ShelveStore class uses Python's shelve module to manage session data, which relies on pickle for serialization. Crafting a malicious payload and storing it in the shelve file can lead to RCE when the payload is deserialized.

Recommendations For version 0.19.8, consider disabling the use of the ShelveStore class until a patch is available, or restrict access to the shelve file to minimize the risk of exploitation. As a temporary workaround, avoid using the pickle module for serialization in the ShelveStore class.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-9701

GHSA-747F-WW56-4Q4H

Affected Products

Kedro

References · 9

• https://osv.dev/vulnerability/CVE-2024-9701 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-747f-ww56-4q4h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-9701 · Security Note
• https://github.com/kedro-org/kedro · Note
• https://github.com/kedro-org/kedro/commit/d79fa51de55ac0ccb58cce1a482df1b445f0fe7c · Note
• https://github.com/kedro-org/kedro/commit/66e5e074b2789469550370f370c8b486f638d975 · Note
• https://huntr.com/bounties/96c77fef-93b2-4d4d-8cbe-57a718d8eea5 · Note
• https://twitter.com/CVEnew/status/1902968841233486149 · Twitter Post
• https://twitter.com/CveFindCom/status/1902669798468878487 · Twitter Post