Security Advisory

CVE-2025-71370

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-23 12:12:54

Last updated 2026-06-23 13:37:33

Assigner VulnCheck

CVSS score 7.6

State PUBLISHED

Description

picklescan before 0.0.28 fails to detect malicious torch.jit.unsupported_tensor_ops.execWrapper function calls embedded in pickle files. Attackers can craft malicious pickle files that bypass picklescan detection and execute arbitrary code when loaded via pickle.load().

← Browse all CVEs View on cve.org ↗