CVE-2026-120859

A flaw was found in PyMoDAQ. An attacker can achieve arbitrary code execution by convincing a user to open a maliciously crafted file, such as a data, dock layout, or XML configuration file. This issue occurs because the application unsafely deserializes untrusted objects and evaluates embedded...

CVE-2026-120859

The PyMoDAQ library (before version 4.4.13) and its components pymodaq_data , pymodaq_gui , and pymodaq_utils (before 5.1.15, 5.2.x before 5.2.14, and 5.3.x before 5.3.10) are vulnerable to arbitrary code execution . The root causes include deserialization of untrusted data and eval injection vul...