CVE-2025-71348

HIGH

picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass

Title source: cna

Description

picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files embedding arbitrary code that evades detection but executes during pickle.load, enabling remote code execution in supply chain attacks.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory

GHSA Advisory GHSA-vv6j-3g6g-2pvj

https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vv6j-3g6g-2pvj

Third Party Advisory third-party-advisory

VulnCheck Advisory: picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass

https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-torch-utils-config-module-load-config-bypass

Scores

CVSS v3 8.1

EPSS 0.0040

EPSS Percentile 32.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-502

Status published

Products (3)

mmaitre314/picklescan < 0.0.28

picklescan/picklescan < 0.0.28

picklescan/picklescan 0.0.28

Published Jun 21, 2026

Tracked Since Jun 21, 2026