Cargo nextest versions 0.9.125 through 0.9.149 inclusive contain a vulnerability in the experimental run recording feature that allows arbitrary code execution when rerunning tests from a malicious portable recording. This occurs because build scope arguments are deserialized without validation, enabling injection of arbitrary Cargo configuration options that execute code during the build phase. The vulnerability is fixed in version 0.9.150.