CVE-2025-71370: picklescan - Remote Code Execution via torch.jit.unsupported_tensor_ops.execWrapper
picklescan before 0.0.28 fails to detect malicious torch.jit.unsupportedtensorops.execWrapper function calls embedded in pickle files. Attackers can craft malicious pickle files that bypass picklescan detection and execute arbitrary code when loaded via pickle.load().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71370?
The severity of CVE-2025-71370 is high with a score of 8.1.
How do I fix CVE-2025-71370?
To fix CVE-2025-71370, upgrade picklescan to version 0.0.28 or later to ensure proper detection of malicious function calls.
What does CVE-2025-71370 exploit?
CVE-2025-71370 exploits the failure of picklescan to detect malicious torch.jit.unsupported_tensor_ops.execWrapper function calls in pickle files.
What type of attack does CVE-2025-71370 enable?
CVE-2025-71370 enables remote code execution through crafted malicious pickle files.
What is the impact of CVE-2025-71370?
The impact of CVE-2025-71370 is the execution of arbitrary code when malicious pickle files are loaded via pickle.load().