AIKIDO-2026-10351

TL;DR

Affected versions of this package insecurely deserialize data in SimpleObjectNodeMapping.from_persist_dir() using unrestricted pickle.load(), which may lead to arbitrary code execution. Because the persist directory path is configurable and the filename object_node_mapping.pickle is predictable, an attacker who can write to this directory can place a malicious pickle payload. When the application later loads the mapping, the crafted object is deserialized and its embedded code executes with the privileges of the running process. It can occur through vectors such as path traversal vulnerabilities, shared writable filesystems, or compromised data ingestion pipelines.