Critical · published December 16, 2025
🚨 An unsafe deserialization vulnerability in MooreThreads torch_musa could let crafty attackers execute arbitrary code with a mere pickle file! 🔥 Think of it like a restaurant that accepts takeout orders without checking the contents — one bad delivery could lead to a disaster in the kitchen! 🍽️ An attacker could send a manipulated pickle file, and once it's opened, the attacker could run any code with the same privileges as the victim process — potentially devastating for your system! Imagine losing control over your application and opening the door wide for malicious activities.
Think of it like a restaurant that accepts takeout orders without checking the contents — one bad delivery could lead to a disaster in the kitchen! 🍽️ This vulnerability occurs because the compare_for_single_op() and nan_inf_track_for_single_op() functions in torch_musa blindly load user-controlled pickle files without validation, allowing attackers to craft a file that executes Python code upon loading.
An attacker could send a manipulated pickle file, and once it's opened, the attacker could run any code with the same privileges as the victim process — potentially devastating for your system! Imagine losing control over your application and opening the door wide for malicious activities. To safeguard against this flaw, update to the latest version of MooreThreads torch_musa immediately. Also, ensure that any user-uploaded files are validated before being processed, and avoid using pickle.load() on untrusted data. 🔒 You’ve got this! By taking these steps, you can secure your environment and keep those pickles out of your code! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mthreads/torch_musa | all versions | — |