VULNERABILITY INTELLIGENCE

CVE-2025-51427

CVSS score8.1 HIGH

EPSS probability0.52%

CISA KEVNot currently listed

Published2026-05-19

Last modified2026-07-24

Description

An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration file (dey_mini.yaml) under the key ['nnet']['module'].