p PatchFirst

CVE-2025-10155

CVE-2025-10155 · PickleScan Security Bypass Using Misleading File Extension

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass pickle files security checks by supplying a standard pickle file with a PyTorch-related file extension. When the pickle file incorrectly considered safe is loaded, it can lead to the execution of malicious code.

CVSS 9.3 · Critical · EPSS 0.8% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • picklescan

    Versions
    • ≥ 0, ≤ 0.0.30: Affected; ≥ 0.0.31: Not affected (semver)

    Update to 0.0.31

  • picklescan PyPI

    Versions
    • 0.0.1
    • 0.0.10
    • 0.0.11
    • 0.0.12
    • 0.0.13
    • 0.0.14
    • 0.0.15
    • 0.0.16
    • 0.0.17
    • 0.0.18
    • 0.0.19
    • 0.0.2
    • 0.0.20
    • 0.0.21
    • 0.0.22
    • 0.0.23
    • 0.0.24
    • 0.0.25
    • 0.0.26
    • 0.0.27
    • 0.0.28
    • 0.0.29
    • 0.0.3
    • 0.0.30
    • 0.0.4
    • 0.0.5
    • 0.0.6
    • 0.0.7
    • 0.0.8
    • 0.0.9
    Affected ranges
    • ECOSYSTEM: < 0.0.31

    Update to 0.0.31

Original sources

Check your server →