HighVulnerability
CVE-2025-54412: skops code execution through OperatorFuncNode operator methods
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-54412
- Published
- Record updated
- Affected
- skops < 0.12.0
- Fixed in
- 0.12.0
- released July 25, 2025, 1 day before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2025-54412 affects skops, a Python library for sharing and shipping scikit-learn based models, in versions 0.11.0 and below. An inconsistency in OperatorFuncNode lets an attacker hide the execution of untrusted operator methods and chain seemingly safe functions in a code reuse attack. The result is arbitrary code execution using minimal and misleading trusted types. GitHub rates it CVSS 4.0 8.7 (High); NIST has not yet provided an assessment.
Mitigation
Fixed in version 0.12.0.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- skopsPyPINo LLM dependency detected · 3 tracked dependents
Related items
- MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
- HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database