9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-31237

CVE-2026-31237: Ludwig framework is vulnerable to insecure deserialization through its predict() method.

The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method. When a user provides a dataset file path to the predict() method, the framework automatically determines the file format. If the file is a pickle (.pkl) file, it is loaded using pandas.read_pickle() without any validation or security restrictions. This allows the deserialization of arbitrary Python objects via the unsafe pickle module. A remote attacker can exploit this by providing a maliciously crafted pickle file, leading to arbitrary code execution on the system running the Ludwig prediction.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-31237

CVE-2026-31237:

9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
ludwig	pip	<= 0.10.4

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the automatic detection and insecure loading of pickle files within the Ludwig framework. The predict method of the LudwigModel class serves as the entry point. When a file path is provided, the get_data_format function identifies if the file is a pickle file by its extension. If so, the read_pickle function is called, which in turn uses the insecure pandas.read_pickle function to load the file. This allows an attacker to execute arbitrary code by crafting a malicious pickle file. The patch, included in commit 86a97e52104387d10b69ee5ff47fdd341a9ac113, completely removes the functionality for handling pickle files, thus mitigating the vulnerability.

Vulnerable functions

read_pickle

ludwig/data/io_utils.py

This function directly calls `pandas.read_pickle` on a user-provided file path without any validation, leading to insecure deserialization and potential remote code execution.

get_data_format

ludwig/data/io_utils.py

This function identifies pickle files based on their extension, which then routes the file to be processed by the vulnerable `read_pickle` function. The patch removes this logic.

LudwigModel.predict

ludwig/api.py

This is the main API method that acts as the entry point for the vulnerability. When a user provides a path to a malicious pickle file, this method initiates the insecure data loading process.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.