CVE-2020-13091

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-05-15 · updated 2026-06-17
Weakness: CWE-502

Description

pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the read_pickle() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner

Affected products

NumFocus Pandas: through 1.0.3

References

https://github.com/0FuzzingQ/vuln/blob/master/pandas%20unserialize.md
https://pandas.pydata.org/pandas-docs/stable/reference/api/pandas.read_pickle.html
https://github.com/0FuzzingQ/vuln/blob/master/pandas%20unserialize.md
https://pandas.pydata.org/pandas-docs/stable/reference/api/pandas.read_pickle.html

Get alerted when CVE-2020-13091 or the next vulnerability affects your stack