CVE-2026-2970

CVE-2026-2970 describes a deserialization vulnerability in the RedisCache function within datapizza-labs datapizza-ai version 0.0.2. This flaw, located in the datapizza-ai-cache/redis/datapizza/cache/redis/cache.py file, allows for arbitrary code execution. The vulnerability carries a CVSS score of 7.5 (HIGH), indicating a significant risk, with an attack vector requiring local network access and a high attack complexity. While exploitation is considered difficult, the potential impact includes high confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, and exploit code is publicly disclosed, though it lacks Metasploit, Nuclei, or ExploitDB modules. Community discussion and media coverage are minimal.