CERT24pysec-2025-19: Bypass of picklescan detection through non-standard pickle file extensionsLoading data…

pysec-2025-19: Bypass of picklescan detection through non-standard pickle file extensions

picklescan versions before 0.0.22 consider only standard pickle file extensions when performing vulnerability scans. An attacker can include a malicious pickle file with a non-standard extension, causing it to be excluded from the scan and appear safe. When loaded by PyTorch, this can lead to arbitrary code execution.

← Back to intelligence

pysec-2025-19: Bypass of picklescan detection through non-standard pickle file extensions

picklescan versions before 0.0.22 consider only standard pickle file extensions when performing vulnerability scans. An attacker can include a malicious pickle file with a non-standard extension, causing it to be excluded from the scan and appear safe. When loaded by PyTorch, this can lead to arbitrary code execution.