{"id":"CVE-2026-120499","summary":"h5io before 0.2.6 Arbitrary Code Execution via read_hdf5","details":"h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which _triage_read() passes to eval() with builtins reachable, name an arbitrary module in class or custom-object nodes that _import_class() imports, or place pickled objects in pd_dataframe or pd_series nodes that pandas deserializes on read.","aliases":["GHSA-vwvw-f6v4-w737"],"modified":"2026-11-05T21:32:21.990900841Z","published":"2026-11-05T16:55:32.599Z","database_specific":{"cwe_ids":["CWE-502","CWE-95"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/120xxx/CVE-2026-120499.json","cna_assigner":"VulnCheck"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/120xxx/CVE-2026-120499.json"},{"type":"PACKAGE","url":"https://github.com/h5io/h5io"},{"type":"ARTICLE","url":"https://github.com/h5io/h5io/blob/h5io-0.2.5/h5io/_h5io.py#L601-L604"},{"type":"FIX","url":"https://github.com/h5io/h5io/commit/afff1d61b31790f8c27e6c577bb7703eb1883ddd"},{"type":"ADVISORY","url":"https://github.com/h5io/h5io/releases/tag/h5io-0.2.6"},{"type":"ADVISORY","url":"https://github.com/h5io/h5io/security/advisories/GHSA-vwvw-f6v4-w737"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120499"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/h5io-before-0.2.6-arbitrary-code-execution-via-read-hdf5"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/h5io/h5io","events":[{"introduced":"3a823826032167c73efe88ac8ed080ced20a8e71"},{"fixed":"afff1d61b31790f8c27e6c577bb7703eb1883ddd"}],"database_specific":{"extracted_events":[{"strategy":"StandardRange","range":[{"introduced":"0.1.0"},{"fixed":"0.2.6"}],"source":"AFFECTED_FIELD"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"afff1d61b31790f8c27e6c577bb7703eb1883ddd"}]}]}}],"versions":["h5io-0.2.5","h5io-0.2.4","h5io-0.2.3","h5io-0.2.2","h5io-0.2.1","h5io-0.2.0","h5io-0.1.11","h5io-0.1.10","h5io-0.1.9","h5io-0.1.8","h5io-0.1.7","h5io-0.1.6","h5io-0.1.5","h5io-0.1.4","h5io-0.1.3","h5io-0.1.2","h5io-0.1.1","h5io-0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-120499.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}