CVE-2026-120499 · Package
NO FIX YET · SEE WHAT TO DO
h5io is a Python library for reading and writing HDF5 files, and before version 0.2.6 its read_hdf5() function evaluates attacker-controlled content from a file. A crafted HDF5 file can make the reader run arbitrary Python code, through an eval() of a node named timezone, an arbitrary module import, or pickled data in pandas nodes.
first public Nov 5, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Any application that calls h5io's read_hdf5() on HDF5 files that could come from outside the team, such as user uploads or downloaded datasets. Applications that only read files the team created themselves and that run with no untrusted input are lower risk. unknown for further detail on default configurations.
Not affected if trusted-files-only, version-0.2.6-or-later
Who cares data-pipelines, h5io, hdf5, python
pip show h5io and compare it to the fixed release.read_hdf5 and note whether it opens files from untrusted sources.0.2.6 or later.h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which _triage_read() passes to eval() with builtins reachable, name an arbitrary module in class or custom-object nodes that _import_class() imports, or place pickled objects in pd_dataframe or pd_series nodes that pandas deserializes on read.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.