High severity8.1NVD Advisory· Published Jul 4, 2026· Updated Jul 6, 2026
CVE-2025-71353
CVE-2025-71353
Description
picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder.get function in reduce methods. Attackers can craft pickle files with embedded code that evades picklescan detection and executes arbitrary commands when loaded.
Affected products
1- Range: <0.0.28
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.