CVE-2026-53875: picklescan - Scanning Bypass via Dynamic Eval in scan_pytorch
picklescan before 1.0.3 contains a scanning bypass vulnerability in the scanpytorch function that allows attackers to embed malicious magic numbers via dynamic eval using the reduce trick. Attackers can craft malicious PyTorch payloads that evade picklescan detection while remaining executable, enabling arbitrary code execution when loaded with torch.load().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
picklescanto a version that resolves this vulnerability.Fixed in 1.0.3 - Compensating control
Do not load untrusted PyTorch payloads with torch.load(), since malicious pickled PyTorch objects can bypass picklescan detection and execute arbitrary code.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53875?
CVE-2026-53875 is classified as high severity with a CVSS score of 7.1.
How do I fix CVE-2026-53875?
To fix CVE-2026-53875, upgrade to version 1.0.3 or later of the picklescan library.
What type of vulnerability is CVE-2026-53875?
CVE-2026-53875 is a scanning bypass vulnerability that affects the scan_pytorch function in picklescan.
What impact does CVE-2026-53875 have on affected systems?
The impact of CVE-2026-53875 allows attackers to execute malicious PyTorch payloads that bypass picklescan detection.
Which software is affected by CVE-2026-53875?
CVE-2026-53875 affects the picklescan software found on PyPI before version 1.0.3.