GitHub Advisoryadvisory · PyPI

GHSA-747f-ww56-4q4h Kedro deserialization vulnerability

CRITICAL Published 2025-03-20 Modified 2026-07-06 Official page ↗
Aliases
CVE-2024-9701
Ecosystem
PyPI
Packages
kedro
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502
Reviewed
2025-03-21

Affected packages

• PyPI kedro: < 0.19.9 → fixed in 0.19.9

Description

A Remote Code Execution (RCE) vulnerability has been identified in the Kedro ShelveStore class (version 0.19.8). This vulnerability allows an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full system compromise. The ShelveStore class uses Python's shelve module to manage session data, which relies on pickle for serialization. Crafting a malicious payload and storing it in the shelve file can lead to RCE when the payload is deserialized.

Related

Alias · CVE (1)

  • CVE-2024-9701 A Remote Code Execution (RCE) vulnerability has been identified in the Kedro ShelveStore class (version 0.19.8). vulnerability

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References