CVE-2025-71369
HIGHpicklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers
Title source: cnaDescription
picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basichandlers in reduce methods, allowing attackers to bypass safety checks. Remote attackers can embed undetected malicious code in pickle files that executes during deserialization, enabling remote code execution.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
GitHub Security Advisory (GHSA-h3qp-7fh3-f8h4)
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-h3qp-7fh3-f8h4
Third Party Advisory third-party-advisory
VulnCheck Advisory: picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers
https://www.vulncheck.com/advisories/picklescan-unsafe-deserialization-via-torch-utils-data-datapipes-utils-decoder-basichandlers
Scores
CVSS v3
8.1
EPSS
0.0044
EPSS Percentile
36.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-502
Status
published
Products (2)
picklescan/picklescan
< 0.0.28
picklescan/picklescan
0.0.28
Published
Jul 04, 2026
Tracked Since
Jul 04, 2026