Pylint versions prior to 3.0.3-3.oe2403sp1 contain a vulnerability where module statistics are stored in predictable cache files and loaded using pickle.load. An attacker with write access to a shared or group-writable cache directory can replace these cache files with malicious serialized data, leading to arbitrary code execution with the privileges of the user running Pylint. This issue is fixed in version 3.0.3-3.oe2403sp1.