CVE-2025-71348CWE-502insecure-deserialization

CVE-2025-71348

High · published June 21, 2026

CVSS v3.1
8.1
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files embedding arbitrary code that evades detection but executes during pickle.load, enabling remote code execution in supply chain attacks.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00554 · 45.5th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-06-21T18:16Z
Affected products (1)
ProductVersionsFixed in
mmaitre314/picklescan< 0.0.280.0.28
References (3)
https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-torch-utils-config-module-load-config-bypass · [email protected]https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vv6j-3g6g-2pvj · 134c704f-9b21-4f2e-91b3-4a467353bcc0https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vv6j-3g6g-2pvj · [email protected]
EPSS history
Timeline
  • 21 JUN 13:26Z
    picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass
    cvelistv5