ZeroHour

CVE-2025-71348

PoC
CVSS 4.0
7.6 high
EPSS
<1%p45
Published
()
Modified
Description

picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files embedding arbitrary code that evades detection but executes during pickle.load, enabling remote code execution in supply chain attacks.

Vendors
mmaitre314
Products
picklescan
Ecosystems
pip
Weakness
CWE-502
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
GHSA
GHSA-vv6j-3g6g-2pvj (high)

In the news

No ingested article mentions this CVE yet.