CVE-2024-28425: LinkedIn Greykite

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/pickle_utils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file.

Affected products

• LinkedIn Greykite: version 1.0.0 only

Published 2024-03-14. Last modified 2026-06-17.