scikit-learn / joblib: `joblib.load()` executes commands from an untrusted file via `__reduce__`

Impact

joblib.load() executes commands from an untrusted file via __reduce__

Who can reach it

Customer-supplied .joblib/.pkl model

What to do

No fix — this is pickle semantics. Reject joblib artifacts from untrusted sources; use skops or ONNX

References

Related entries

• PyTorch (`torch.jit.annotations.parse_type_line`): Arbitrary code execution via unsafe `eval` in TorchScript typeCVE-2022-45907 · PyTorch (`torch.jit.annotations.parse_type_line`)Critical
• MLflow: Path traversal prior to 2.3.1CVE-2023-2780 · MLflowCritical
• LangChain (`LLMMathChain`): Prompt injectionCVE-2023-29374 · LangChain (`LLMMathChain`)Critical
• LangChain (PALChain): Arbitrary code execution via `os.system`/`exec` in generated codeCVE-2023-36258 · LangChain (PALChain)Critical
• LangChain (`load_prompt`): Arbitrary code execution from a JSON prompt fileCVE-2023-36281 · LangChain (`load_prompt`)Critical
• langchain-experimental (PALChain): Bypass of the CVE-2023-36258 fixCVE-2023-44467 · langchain-experimental (PALChain)Critical