CVE-2024-0936 is a medium severity flaw (CVSS 6.3) in TemporAI. The record says the vendor confirmed the issue and planned a patch for February 2024. This guide covers who is affected, how to check your exposure, and what to do now.
What's affected
van_der_Schaar LAB TemporAI 0.0.3, function load_from_file of the PKL file handler.
The record gives a CVSS base score of 6.3 (Medium), vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L. The weakness class is CWE-502.
The record scores this 6.3 Medium. A public proof of concept is linked in the references and is not described here.
The record says exploit details have been disclosed publicly, so assume that attackers can learn how the weakness works. The record says the vendor confirmed the issue and planned a patch for February 2024. It names no fixed version, so check the project releases.
How to check if you're exposed
Run pip show temporai or pip list | grep -i temporai in each environment, and compare with 0.0.3. Search code for load_from_file calls on files you did not create.
A free in-browser dependency scan at gold.safeguard.sh/scan can show whether a software package in your own projects matches this CVE, and the Gold directory entry for CVE-2024-0936 keeps the record details in one place. Reachability analysis helps you separate installations where the vulnerable code can actually be hit from those where it sits unused.
For hardware and appliances, no scanner will find them unless they are in an inventory, so start with a list of every device and application of this kind on your network.
What to do now
- Identify every instance of TemporAI in your environment, including test and forgotten systems.
- Compare the version you found with the affected range above.
- Look for a fixed release from the vendor or project. The record says the vendor confirmed the issue and planned a patch for February 2024.
- Apply mitigations while you wait: only load model files you generated yourself, and keep untrusted pickle files out of analysis environments.
- Review logs around the affected component for unusual requests.
- Record the decision and a re-check date in your vulnerability tracker.
Why it matters
The weakness is deserialization of untrusted data, CWE-502. Python pickle style formats can run code as part of loading, so opening a file or message from an untrusted source is the same as running it. The record notes that the attack depends on the victim loading a crafted file.
The practical rule is simple: never load pickle or cloudpickle data from a source you do not control. Where a library offers a safer format, use it, and treat any model or dataset file from outside your organization as untrusted input.
The record shows this CVE is not in the CISA Known Exploited Vulnerabilities catalog, and none of the pages used for this article report exploitation in the wild.
Quick check
Is loading a pickle file safe if it looks like a dataset?
No. Pickle based loading can run code, so only load files you created or can verify.
Where can I confirm the fixed version?
Check the vendor or project advisory first. The record says the vendor confirmed the issue and planned a patch for February 2024. This article is based on the NVD record and the pages listed under Sources.
Sources
- https://github.com/bayuncao/vul-cve-5
- https://vuldb.com/?ctiid.252181
- https://vuldb.com/?id.252181
- Safeguard Gold record for CVE-2024-0936
Last reviewed: 19 October 2026.
