CVE-2026-120859 | PyMoDAQ prior 4.4.13/5.1.15/5.2.14/5.3.10 HDF5 Data Handler deserialization

November 5, 2026 Yanac

A vulnerability classified as problematic was found in PyMoDAQ. This impacts the function StringARRAY.array_to_string/JsonConverter.json2object/load_layout_state/elt_to_dict/set_txt_from_elt of the component HDF5 Data Handler/Dashboard Layout Loading/XML Settings Parsing. The manipulation results in deserialization.

This vulnerability is known as CVE-2026-120859. Attacking locally is a requirement. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More