# Insecure pickle deserialization in Python — Agent PR X-Ray

> Canonical page: https://codevetter.com/xray/py-insecure-deserialization

This is an adjudicated synthetic benchmark example, not a claim about an uploaded repository.

## Source

- Corpus: codevetter-public-benchmark/py-insecure-deserialization
- Language: python
- Category: security
- Evidence state: benchmark_ground_truth

## Finding

- Severity: high
- Title: insecure deserialization
- Summary: pickle.loads is called on a user-supplied base64 blob. pickle can execute arbitrary code during deserialization, so untrusted input lets an attacker run any payload on the server.
- Source anchor: `source.py:9`

## Verification boundary

The static finding is qualified against benchmark ground truth. No exact-current executable test or audience validation is included in this example, so those stages remain unverified.

## Public product links

- [CodeVetter](https://codevetter.com/)
- [Download](https://codevetter.com/download)
- [Documentation](https://codevetter.com/docs/)
- [Source](https://github.com/Codevetter/codevetter)