An insecure deserialization of Python pickle objects occurs when Sentry imports a user‑supplied relocation archive. The import worker process will execute the contained objects, allowing an authenticated attacker to run arbitrary code on the host. This can lead to full system compromise because the worker operates with the privileged credentials of the Sentry instance.

The affected vendor is Sentry by Getsentry. Any instance running version 23.11.0 through 26.6.x with the relocation feature enabled is vulnerable. Self‑hosted installations in the default configuration are safe because the relocation feature is disabled by default, but any manual enablement places the instance at risk.

The CVSS score of 7.7 classifies the vulnerability as high severity. No EPSS data is available and the issue is not listed in the CISA KEV catalog. Exploitation requires an authenticated user who can trigger an import of a malicious relocation archive. The attack vector is therefore likely an authenticated API or UI operation, and the attacker can execute arbitrary code on the host through the import worker process.