CVE-2026-120833

The labbench software (versions before 0.46.1 ) is vulnerable to a deserialization of untrusted data vulnerability within the read() and read_relational() functions. The root cause is an auto-dispatch mechanism that passes any file with a .p or .pickle extension to pandas.read_pickle based solely...