CVE-2026-120499

h5io before 0.2.6 contains a code injection vulnerability in read hdf5() that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triage read() passes to eval() with builtins reachable, name an arbitrary module in class or custom-object nodes that import class() imports, or place pickled objects in pd dataframe or pd series nodes that pandas deserializes on read.