Skip to content
Threat Feed
Subscribe

Product

Uproot

1 brief RSS
high advisory

Arbitrary Code Execution in uproot via Crafted ROOT Files (CVE-2026-9147)

A vulnerability, CVE-2026-9147, in the uproot library allows arbitrary Python code execution when processing crafted ROOT files due to improper handling of streamer metadata fields during dynamic code generation, impacting applications that open or process untrusted ROOT files.

uproot vulnerability rce python code-execution
1t 1c