CVE-2020-13092

Published: May 15, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner

Affected (1)

Products: Scikit Learn: Scikit Learn

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Scikit Learn Scikit Learn	Up to 0.23.0

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (4)

https://github.com/0FuzzingQ/vuln/blob/master/sklearn%20unserialize.md

Source: cve@mitre.org

ExploitThird Party Advisory

https://scikit-learn.org/stable/modules/model_persistence.html#security-maintainability-limitations

Source: cve@mitre.org

Third Party Advisory

https://github.com/0FuzzingQ/vuln/blob/master/sklearn%20unserialize.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://scikit-learn.org/stable/modules/model_persistence.html#security-maintainability-limitations

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.