PT-2026-40124 · Ludwig · Ludwig

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-31237

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ludwig framework versions prior to 0.10.5

Description Insecure deserialization occurs through the predict() method. When a dataset file path is provided to this method, the framework automatically determines the file format. If a pickle (.pkl) file is used, it is loaded via the pandas.read pickle() function without validation or security restrictions. This allows the deserialization of arbitrary Python objects using the unsafe pickle module, which can lead to arbitrary code execution on the system running the prediction.

Recommendations Update to version 0.10.5 or later. As a temporary workaround, avoid providing pickle (.pkl) files to the predict() method.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-31237

GHSA-WCR3-GM9F-F87Q

Affected Products

Ludwig

References · 4

• https://osv.dev/vulnerability/GHSA-wcr3-gm9f-f87q · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31237 · Security Note
• https://github.com/ludwig-ai/ludwig · Note
• https://notion.so/CVE-2026-31237-35d1e139318881fb95a2ee7c5d0e17d8 · Note