PT-2026-40062 · Pypi · Snorkel

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-31223

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions snorkel versions prior to 0.10.1

Description Insecure deserialization occurs in the BaseLabeler.load() method of the BaseLabeler class. The method utilizes the pickle.load() function to load serialized labeler models from user-supplied file paths without validation. Because the pickle module can execute arbitrary code during the deserialization of untrusted data, a remote attacker can provide a maliciously crafted pickle file to achieve arbitrary code execution on the system.

Recommendations Update to a version later than 0.10.0. As a temporary workaround, avoid using the BaseLabeler.load() method with untrusted files.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-31223

GHSA-FQ92-QC8F-482V

Affected Products

Snorkel

References · 4

• https://osv.dev/vulnerability/GHSA-fq92-qc8f-482v · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31223 · Security Note
• https://github.com/snorkel-team/snorkel · Note
• https://notion.so/CVE-2026-31223-35d1e1393188811ab1d0e4a8a2e67992 · Note