CVE-2025-71369

HIGH8.1

picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers

Published Jul 4, 2026

Modified 1 weeks ago

Details

picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basichandlers in reduce methods, allowing attackers to bypass safety checks. Remote attackers can embed undetected malicious code in pickle files that executes during deserialization, enabling remote code execution.

References

DETECTION

https://github.com/mmaitre314/picklescan/security/advisories/GHSA-h3qp-7fh3-f8h4

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-71369

ADVISORY

https://www.vulncheck.com/advisories/picklescan-unsafe-deserialization-via-torch-utils-data-datapipes-utils-decoder-basichandlers

CVSS Analysis

CVSS v4.0

7.6

Exploitability

Attack Vector