The LabOne Q serialization framework prior to a fix allowed unsafe dynamic class loading during deserialization. It accepted arbitrary fully-qualified Python class names from serialized data without validation, enabling an attacker to craft malicious experiment files that execute arbitrary code when deserialized by the victim. Exploitation requires victim interaction to load a malicious file.