{"id":"CVE-2025-71348","aliases":[],"cve":{"records":[{"id":"CVE-2025-71348","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-06-20T12:48:06.735Z","published":"2026-06-21T13:26:48.046Z","modified":"2026-11-08T14:00:28.950Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-11-08T14:00:28.950Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-06-22T19:05:55.706Z"}],"references":[{"url":"https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vv6j-3g6g-2pvj","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-torch-utils-config-module-load-config-bypass","tags":["third-party-advisory"],"source":"VulnCheck"},{"url":"https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vv6j-3g6g-2pvj","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-502","description":"Deserialization of Untrusted Data","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mmaitre314:picklescan:*:*:*:*:*:*:*:*","versionEndExcluding":"0.0.28"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-06-22T19:05:34.765825Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files embedding arbitrary code that evades detection but executes during pickle.load, enabling remote code execution in supply chain attacks.","score":8.1,"severity":"high","published":"2026-06-21T13:26:48.046Z","modified":"2026-11-08T14:00:28.950Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"picklescan","name":"picklescan","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"0.0.28","versionType":"semver"},{"version":"0.0.28","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:pypi/picklescan","packageIdentity":{"ecosystem":"PyPI","name":"picklescan"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2025-71348"}],"remediation":[],"references":["https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vv6j-3g6g-2pvj","https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-torch-utils-config-module-load-config-bypass"],"sources":[{"name":"CVE","id":"CVE-2025-71348","modified":"2026-11-08T14:00:28.950Z","url":"https://www.cve.org/CVERecord?id=CVE-2025-71348"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","score":7.6},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","score":8.1}],"sourceAffected":[],"observedAt":"2026-11-08T14:07:04.629Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:30:31.194Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T08:20:32.700Z","attemptedAt":"2026-11-09T08:20:32.700Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T08:20:32.852Z","attemptedAt":"2026-11-09T08:20:32.852Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T08:20:33.534Z","attemptedAt":"2026-11-09T08:20:33.534Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T08:20:32.647Z","attemptedAt":"2026-11-09T08:20:32.647Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2025-71348","url":"https://www.first.org/epss/","probability":0.00554,"percentile":0.46498,"date":"2026-11-08","checkedAt":"2026-11-09T08:20:32.647Z"},{"source":"NVD","id":"CVE-2025-71348","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71348","modified":"2026-10-12T22:10:00.247","score":7.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-09T08:20:32.700Z"},{"source":"NVD","id":"CVE-2025-71348","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71348","modified":"2026-10-12T22:10:00.247","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","checkedAt":"2026-11-09T08:20:32.700Z"},{"source":"NVD","id":"CVE-2025-71348","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71348","modified":"2026-10-12T22:10:00.247","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","checkedAt":"2026-11-09T08:20:32.700Z"},{"source":"GitHub Advisory Database","id":"GHSA-vv6j-3g6g-2pvj","url":"https://github.com/advisories/GHSA-vv6j-3g6g-2pvj","modified":"2026-09-11T19:36:48Z","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","checkedAt":"2026-11-09T08:20:32.852Z"},{"source":"ENISA EUVD","id":"EUVD-2025-210291","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210291","modified":"Nov 8, 2026, 2:00:28 PM","score":7.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","checkedAt":"2026-11-09T08:20:33.534Z"}],"aiSummary":{"text":"picklescan before version 0.0.28 may execute arbitrary code via malicious pickle files, potentially enabling code execution. Attackers can craft such files to evade detection. The weakness is deserialization of untrusted data.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-08T16:56:10.371Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2025-71348"}]}}