CVE-2026-31223: n/a
The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class. The method loads serialized labeler models using the unsafe pickle.load() function on user-supplied file paths without any validation or security controls. Python's pickle module is inherently dangerous for deserializing untrusted data, as it can execute arbitrary code during the deserialization process. A remote attacker can exploit this by providing a maliciously crafted pickle file, leading to arbitrary code execution on the victim's system when the file is loaded via the vulnerable method.
AI Analysis
Technical Summary
The snorkel library versions through 0.10.0 contain a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method. This method deserializes labeler models using Python's pickle.load() on user-supplied file paths without any security validation. Since pickle can execute arbitrary code during deserialization, an attacker can craft a malicious pickle file that leads to arbitrary code execution on the victim system when loaded. The vulnerability is remotely exploitable without privileges and requires user interaction. The CVSS v3.1 score is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No patch or official remediation has been published yet.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary code on affected systems by tricking users into loading malicious pickle files via the vulnerable BaseLabeler.load() method. This compromises confidentiality, integrity, and availability of the system. The vulnerability is critical due to the potential for full system compromise.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid loading serialized labeler models from untrusted or unauthenticated sources. Consider implementing additional validation or sandboxing when deserializing data with pickle to reduce risk.
CVE-2026-31223: n/a
Description
The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class. The method loads serialized labeler models using the unsafe pickle.load() function on user-supplied file paths without any validation or security controls. Python's pickle module is inherently dangerous for deserializing untrusted data, as it can execute arbitrary code during the deserialization process. A remote attacker can exploit this by providing a maliciously crafted pickle file, leading to arbitrary code execution on the victim's system when the file is loaded via the vulnerable method.
CVSS v3.1
Score 8.8high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The snorkel library versions through 0.10.0 contain a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method. This method deserializes labeler models using Python's pickle.load() on user-supplied file paths without any security validation. Since pickle can execute arbitrary code during deserialization, an attacker can craft a malicious pickle file that leads to arbitrary code execution on the victim system when loaded. The vulnerability is remotely exploitable without privileges and requires user interaction. The CVSS v3.1 score is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No patch or official remediation has been published yet.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary code on affected systems by tricking users into loading malicious pickle files via the vulnerable BaseLabeler.load() method. This compromises confidentiality, integrity, and availability of the system. The vulnerability is critical due to the potential for full system compromise.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid loading serialized labeler models from untrusted or unauthenticated sources. Consider implementing additional validation or sandboxing when deserializing data with pickle to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-03-09T00:00:00.000Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a034c84cbff5d8610fe99ee
Added to database: 05/12/2026, 15:51:32 UTC
Last enriched: 05/19/2026, 18:17:43 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 71
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.