CyberRota Analysis
AI-GeneratedA deserialization vulnerability exists in the `load` function of the `pyod.utils.persistence` module in versions up to 3.6.1, allowing remote attackers to manipulate the `path` argument. This could lead to unauthorized code execution or data compromise. Users of the affected pyod library, particularly those in data science and machine learning environments, should prioritize upgrading to version 3.6.2 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. Upgrading to version 3.6.2 is able to address this issue. It is recommended to apply a patch to fix this issue. The pull request to fix this issue requires some minor changes.