Staging Environment: Content and features may be unstable or change without notice.
Advisory details: vulnrichment / CVE-2026-53875
Advisory ID vulnrichment/CVE-2026-53875
Aliases
Summary picklescan before 1.0.3 contains a scanning bypass vulnerability in the scan_pytorch function that allows attackers to embed malicious magic numbers via dynamic eval using the __reduce__ trick. Attackers can craft malicious PyTorch payloads that evade picklescan detection while remaining executable, enabling arbitrary code execution when loaded with torch.load().
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
System Score Found at
cvssv4 7.1
ssvc Track
Reference id Reference type URL
134179474539648ba7dee1317959529fbd0e7f89 Other https://github.com/mmaitre314/picklescan/commit/134179474539648ba7dee1317959529fbd0e7f89
2a8383cfeb4158567f9770d86597300c9e508d0f Other https://github.com/mmaitre314/picklescan/commit/2a8383cfeb4158567f9770d86597300c9e508d0f
GHSA-97f8-7cmv-76j2 https://github.com/mmaitre314/picklescan/security/advisories/GHSA-97f8-7cmv-76j2
picklescan-scanning-bypass-via-dynamic-eval-in-scan-pytorch Advisory https://www.vulncheck.com/advisories/picklescan-scanning-bypass-via-dynamic-eval-in-scan-pytorch
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N Found at None
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-06-17T17:50:29Z/ Found at None

Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-06-17T17:50:29Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2026/53xxx/CVE-2026-53875.json

Source Advisory: vulnrichment/CVE-2026-53875

View SSVC decision tree 
[{'Exploitation': 'poc'},
 {'Automatable': 'no'},
 {'Technical Impact': 'partial'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]