CVE-2025-71348: picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass
picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils.configmodule.loadconfig function within reduce methods. Attackers can craft pickle files embedding arbitrary code that evades detection but executes during pickle.load, enabling remote code execution in supply chain attacks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
picklescanto a version that resolves this vulnerability.Fixed in 0.0.28 - Compensating control
If you cannot upgrade picklescan, treat pickle files as untrusted and block/avoid automated processing of pickle payloads, since malicious pickle files can execute during pickle.load and may bypass detection by picklescan before 0.0.28.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71348?
The severity of CVE-2025-71348 is high with a score of 7.6.
What type of vulnerability is CVE-2025-71348?
CVE-2025-71348 is an arbitrary code execution vulnerability in the picklescan library.
How do I fix CVE-2025-71348?
To fix CVE-2025-71348, update picklescan to version 0.0.28 or later.
Who is affected by CVE-2025-71348?
Users of picklescan prior to version 0.0.28 are affected by CVE-2025-71348.
What is the impact of CVE-2025-71348?
The impact of CVE-2025-71348 allows attackers to execute arbitrary code remotely via crafted pickle files.