CVE-2025-54412: skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below co
highvulnerability
security
Summary
skops is a Python library for sharing scikit-learn (a machine learning toolkit) based models. Versions 0.11.0 and below have a flaw in the OperatorFuncNode component that allows attackers to hide the execution of untrusted code, potentially leading to arbitrary code execution (running any commands on a system). This vulnerability can be exploited through code reuse attacks that make unsafe functions appear trustworthy.
Solution / Mitigation
Update to version 0.12.0, where this vulnerability is fixed.
Vulnerability Details
EPSS (30-day exploit probability)
EPSS: 0.0%
Classification
Attack Type
Model Theft
Attack SophisticationAdvanced
Impact (CIA+S)
confidentialityintegrity
Taxonomy References
CWE (Weakness Type)
Affected Vendors
HuggingFace
Related Issues
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-54412
First tracked: February 15, 2026 at 08:42 PM
Classified by LLM (prompt v3) · confidence: 85%