HighVulnerability
CVE-2025-10155: picklescan improper input validation lets pickle files bypass security checks
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-10155
- Published
- Record updated
- Affected
- picklescan <= 0.0.30
- Fixed in
- 0.0.31
- released September 8, 2025, 9 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.8%
Summary
CVE-2025-10155 is an Improper Input Validation flaw (CWE-20) in the scanning logic of mmaitre314 picklescan, versions up to and including 0.0.30. A remote attacker can supply a standard pickle file with a PyTorch-related file extension to bypass picklescan's security checks. If the file is loaded, it can lead to execution of malicious code. JFrog rates it CVSS 4.0 9.3 CRITICAL, and NVD has not yet provided an assessment.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
- HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSimilar attack · NVD/CVE Database