CVE-2026-2970 | datapizza-labs datapizza-ai 0.0.2 cache.py RedisCache deserialization

A vulnerability labeled as critical has been found in datapizza-labs datapizza-ai 0.0.2. Affected by this vulnerability is the function RedisCache of the file datapizza-ai-cache/redis/datapizza/cache/redis/cache.py. Such manipulation leads to deserialization.

This vulnerability is documented as CVE-2026-2970. The attack requires being on the local network. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.