EUVD-2026-63433
GHSA-88rp-m596-52gg
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
File-based trigger is local (AV:L); no privileges needed to call the function (PR:N); victim must actively load the malicious file (UI:R); full process compromise results (C/I/A:H).
Primary rating from Vendor (zdi).
CVSS VectorVendor: zdi
Lifecycle Timeline
3DescriptionCVE.org
Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the load_rehab_pile_dataset method. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28749.
AnalysisAI
Remote code execution in Aeon 1.3.0 is triggered when a user loads a maliciously crafted dataset file via the load_rehab_pile_dataset function, which called numpy's np.load() with allow_pickle=True - enabling full Python pickle deserialization of attacker-controlled content. Reported by Zero Day Initiative (ZDI-CAN-28749 / ZDI-26-468) and tracked as EUVD-2026-63433, the vulnerability carries CVSS 7.8 with full confidentiality, integrity, and availability impact limited by local attack vector and required user interaction. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the target to actively call load_rehab_pile_dataset() with a file path that resolves to an attacker-controlled .npy or .npz file containing a serialized pickle payload. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.8 score (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) accurately captures the attack's high impact ceiling but reflects meaningful constraints: exploitation is local (AV:L, meaning the malicious file must be accessible on the victim's filesystem) and requires active user interaction (UI:R, the victim must call load_rehab_pile_dataset against the malicious file). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the upstream patch commit 751918052c0cce266b4f7cd4b084408526efc015 available at https://github.com/aeon-toolkit/aeon/commit/751918052c0cce266b4f7cd4b084408526efc015, which removes allow_pickle=True from np.load() calls in rehabpile_loader.py and replaces unsafe eval() with ast.literal_eval() in _tss_data_loaders.py. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: identify and inventory all systems and users running Aeon 1.3.0, and issue a security alert directing users not to open dataset files from untrusted or external sources. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Arbitrary code execution in aeon 1.3.0 is triggered when a user loads a maliciously crafted CSV dataset file via the `lo
Remote code execution in aeon 1.3.0 is possible when a user loads a maliciously crafted CSV dataset via the `load_human_
Multiple cross-site scripting (XSS) vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow remote attackers to inject a
Same weakness CWE-502 – Deserialization of Untrusted Data
View allSame technique Deserialization
View allShare
External POC / Exploit Code
Leaving vuln.today