PT-2026-57616 · Yzhao062 · Pyod

Dem0000000 · Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-15529

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The pull request to fix this issue requires some minor changes.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-20

CWE-502

Related Identifiers

CVE-2026-15529

Affected Products

Pyod

References · 8

• https://github.com/yzhao062/pyod/pull/698 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-15529 · Security Note
• https://github.com/yzhao062/pyod/issues/697 · Note
• https://github.com/yzhao062/pyod · Note
• https://vuldb.com/cve/CVE-2026-15529 · Note
• https://vuldb.com/vuln/377872/cti · Note
• https://vuldb.com/submit/854559 · Note
• https://vuldb.com/vuln/377872 · Note