AIKIDO-2026-10736

TL;DR

Affected versions of this package insecurely allowed pickle deserialization when loading job results or checkpoints, which can lead to arbitrary code execution if untrusted serialized data is processed. An attacker able to supply or tamper with data in PICKLED_V4 format could craft a malicious payload that executes code during deserialization when functions such as job.result(), load_job_result(), or load_job_checkpoint() are called. This issue is mitigated by disabling pickle deserialization by default and requiring allow_pickle=True to explicitly opt in.