CVE-2025-71348

EUVD-2025-210291
picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files embedding arbitrary code that evades detection but executes during pickle.load, enabling remote code execution in supply chain attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.1 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
Affected Products (NVD)
VendorProductVersion
mmaitre314picklescan
𝑥
< 0.0.28
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vv6j-3g6g-2pvj
https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-torch-utils-config-module-load-config-bypass
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vv6j-3g6g-2pvj