The snorkel library versions through 0.10.0 contain a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method. This method loads serialized labeler models using Python's pickle.load() on user-supplied file paths without any validation or security controls. Since pickle can execute arbitrary code during deserialization, an attacker can craft a malicious pickle file that leads to arbitrary code execution on the victim system when loaded via this method. There is no CVSS score assigned and no vendor advisory or patch information available at this time.

Exploitation of this vulnerability allows remote attackers to execute arbitrary code on affected systems by supplying a malicious pickle file to the vulnerable BaseLabeler.load() method. This can lead to full system compromise depending on the privileges of the running process. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid loading serialized labeler models from untrusted or unauthenticated sources. Consider implementing additional validation or sandboxing around deserialization operations to reduce risk.