{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-120499", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-11-02T15:06:46.389Z", "datePublished": "2026-11-05T16:55:32.599Z", "dateUpdated": "2026-11-05T18:30:58.290Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-05T16:55:32.599Z"}, "datePublic": "2026-11-05T16:19:44.000Z", "title": "h5io before 0.2.6 Arbitrary Code Execution via read_hdf5", "descriptions": [{"lang": "en", "value": "h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which _triage_read() passes to eval() with builtins reachable, name an arbitrary module in class or custom-object nodes that _import_class() imports, or place pickled objects in pd_dataframe or pd_series nodes that pandas deserializes on read."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')", "cweId": "CWE-95", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "description": "Deserialization of Untrusted Data", "cweId": "CWE-502", "type": "CWE"}]}], "affected": [{"vendor": "h5io", "product": "h5io", "packageURL": "pkg:pypi/h5io", "repo": "https://github.com/h5io/h5io", "defaultStatus": "unaffected", "versions": [{"version": "0.1.0", "status": "affected", "versionType": "semver", "lessThan": "0.2.6"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 8.5, "baseSeverity": "HIGH"}}, {"format": "CVSS", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "references": [{"url": "https://github.com/h5io/h5io/security/advisories/GHSA-vwvw-f6v4-w737", "tags": ["vendor-advisory"], "name": "GitHub Security Advisory (GHSA-vwvw-f6v4-w737)"}, {"url": "https://github.com/h5io/h5io/commit/afff1d61b31790f8c27e6c577bb7703eb1883ddd", "tags": ["patch"]}, {"url": "https://github.com/h5io/h5io/releases/tag/h5io-0.2.6", "tags": ["release-notes"], "name": "h5io h5io-0.2.6 Release Notes"}, {"url": "https://github.com/h5io/h5io/blob/h5io-0.2.5/h5io/_h5io.py#L601-L604", "tags": ["technical-description"]}, {"name": "VulnCheck Advisory: h5io before 0.2.6 Arbitrary Code Execution via read_hdf5", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/h5io-before-0.2.6-arbitrary-code-execution-via-read-hdf5"}], "credits": [{"lang": "en", "value": "Dilanka Kaushal Hewage (r3vpwnx)", "type": "finder"}], "x_generator": {"engine": "vulncheck-endgame"}}, "adp": [{"references": [{"url": "https://github.com/h5io/h5io/security/advisories/GHSA-vwvw-f6v4-w737", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-05T18:30:02.460697Z", "id": "CVE-2026-120499", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-05T18:30:58.290Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-120499", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-05T18:30:02.460697Z"}}}], "references": [{"url": "https://github.com/h5io/h5io/security/advisories/GHSA-vwvw-f6v4-w737", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-05T18:30:29.815Z"}}], "cna": {"title": "h5io before 0.2.6 Arbitrary Code Execution via read_hdf5", "credits": [{"lang": "en", "type": "finder", "value": "Dilanka Kaushal Hewage (r3vpwnx)"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 8.5, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"repo": "https://github.com/h5io/h5io", "vendor": "h5io", "product": "h5io", "versions": [{"status": "affected", "version": "0.1.0", "lessThan": "0.2.6", "versionType": "semver"}], "packageURL": "pkg:pypi/h5io", "defaultStatus": "unaffected"}], "datePublic": "2026-11-05T16:19:44.000Z", "references": [{"url": "https://github.com/h5io/h5io/security/advisories/GHSA-vwvw-f6v4-w737", "name": "GitHub Security Advisory (GHSA-vwvw-f6v4-w737)", "tags": ["vendor-advisory"]}, {"url": "https://github.com/h5io/h5io/commit/afff1d61b31790f8c27e6c577bb7703eb1883ddd", "tags": ["patch"]}, {"url": "https://github.com/h5io/h5io/releases/tag/h5io-0.2.6", "name": "h5io h5io-0.2.6 Release Notes", "tags": ["release-notes"]}, {"url": "https://github.com/h5io/h5io/blob/h5io-0.2.5/h5io/_h5io.py#L601-L604", "tags": ["technical-description"]}, {"url": "https://www.vulncheck.com/advisories/h5io-before-0.2.6-arbitrary-code-execution-via-read-hdf5", "name": "VulnCheck Advisory: h5io before 0.2.6 Arbitrary Code Execution via read_hdf5", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck-endgame"}, "descriptions": [{"lang": "en", "value": "h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which _triage_read() passes to eval() with builtins reachable, name an arbitrary module in class or custom-object nodes that _import_class() imports, or place pickled objects in pd_dataframe or pd_series nodes that pandas deserializes on read."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-95", "description": "Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-502", "description": "Deserialization of Untrusted Data"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-05T16:55:32.599Z"}}}, "cveMetadata": {"cveId": "CVE-2026-120499", "state": "PUBLISHED", "dateUpdated": "2026-11-05T18:30:58.290Z", "dateReserved": "2026-11-02T15:06:46.389Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-11-05T16:55:32.599Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageURL": "pkg:pypi/h5io", "product": "h5io", "repo": "https://github.com/h5io/h5io", "vendor": "h5io", "versions": [{"lessThan": "0.2.6", "status": "affected", "version": "0.1.0", "versionType": "semver"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which _triage_read() passes to eval() with builtins reachable, name an arbitrary module in class or custom-object nodes that _import_class() imports, or place pickled objects in pd_dataframe or pd_series nodes that pandas deserializes on read."}], "id": "CVE-2026-120499", "lastModified": "2026-11-12T21:36:06.743", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-120499", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-05T18:30:02.460697Z", "version": "2.0.3"}}]}, "published": "2026-11-05T17:18:00.097", "references": [{"source": "disclosure@vulncheck.com", "url": "https://github.com/h5io/h5io/blob/h5io-0.2.5/h5io/_h5io.py#L601-L604"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/h5io/h5io/commit/afff1d61b31790f8c27e6c577bb7703eb1883ddd"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/h5io/h5io/releases/tag/h5io-0.2.6"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/h5io/h5io/security/advisories/GHSA-vwvw-f6v4-w737"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/h5io-before-0.2.6-arbitrary-code-execution-via-read-hdf5"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/h5io/h5io/security/advisories/GHSA-vwvw-f6v4-w737"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-95"}, {"lang": "en", "value": "CWE-502"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{"bugzilla": {"description": "h5io: h5io: Arbitrary code execution via crafted HDF5 file", "id": "2567484", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567484"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.8", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-94", "details": ["A flaw was found in h5io. This vulnerability allows an attacker to execute arbitrary code by convincing a user to process a specially crafted Hierarchical Data Format (HDF5) file. During file parsing in the read_hdf5 function, unsafe evaluation and deserialization of embedded objects enables unauthorized code execution with the permissions of the application user."], "mitigation": {"lang": "en:us", "value": "Do not load or process HDF5 files from untrusted or unverified external sources.\nIf processing untrusted datasets is required, execute workloads within an isolated container or restricted sandbox running under an unprivileged user account with minimal access to local storage and network resources.\nCaveat: Sandboxing or container isolation mitigates lateral movement and host compromise but does not prevent malicious code execution within the isolated container boundary itself."}, "name": "CVE-2026-120499", "public_date": "2026-11-05T16:55:32Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-120499\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-120499\nhttps://github.com/h5io/h5io/blob/h5io-0.2.5/h5io/_h5io.py#L601-L604\nhttps://github.com/h5io/h5io/commit/afff1d61b31790f8c27e6c577bb7703eb1883ddd\nhttps://github.com/h5io/h5io/releases/tag/h5io-0.2.6\nhttps://github.com/h5io/h5io/security/advisories/GHSA-vwvw-f6v4-w737\nhttps://www.vulncheck.com/advisories/h5io-before-0.2.6-arbitrary-code-execution-via-read-hdf5"], "statement": "Red Hat rates this vulnerability as Important severity because an attacker can achieve arbitrary execution within the process context without prior privileges, although exploitation requires local interaction to load malicious data. The affected library is not part of default system installations and is typically utilized within standalone data-processing environments rather than persistently exposed daemons. As a result, the risk is confined to individual workloads or user accounts that ingest datasets originating from unverified external sources.", "threat_severity": "Important"}