p PatchFirst

CVE-2025-54886

CVE-2025-54886 · skops: Card.get_model does not block arbitrary code execution

This page contains facts from public vulnerability sources. Check the original advisory before updating.

skops is a Python library which helps users share and ship their scikit-learn based models. In versions 0.12.0 and below, the Card.get_model does not contain any logic to prevent arbitrary code execution. The Card.get_model function supports both joblib and skops for model loading. When loading .skops models, it uses skops' secure loading with trusted type validation, raising errors for untrusted types unless explicitly allowed. However, when non-.zip file formats are provided, the function silently falls back to joblib without warning. Unlike skops, joblib allows arbitrary code execution during loading, bypassing security measures and potentially enabling malicious code execution. This issue is fixed in version 0.13.0.

CVSS 8.4 · High · EPSS 0.2% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • skops

    Versions
    • < 0.13.0: Affected

    No fix published

  • skops PyPI

    Versions
    • 0.1
    • 0.1.dev0
    • 0.10.0
    • 0.11.0
    • 0.12.0
    • 0.2
    • 0.3.0
    • 0.4.0
    • 0.5.0
    • 0.6.0
    • 0.7.0
    • 0.7.post0
    • 0.8.0
    • 0.9.0
    Affected ranges
    • ECOSYSTEM: < 0.13.0

    Update to 0.13.0

Original sources

Check your server →