VULNERABILITY INTELLIGENCE

CVE-2025-10155

CVSS score9.3 CRITICAL
EPSS probability0.85%
CISA KEVNot currently listed
Published2025-09-17
Last modified2026-09-26
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass pickle files security checks by supplying a standard pickle file with a PyTorch-related file extension. When the pickle file incorrectly considered safe is loaded, it can lead to the execution of malicious code.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references