Description
picklescan before 0.0.28 fails to detect malicious pickle files using torch.utils.collect_env.run function in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| picklescan | picklescan | < 0.0.28 | 0.0.28 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | picklescan | < 0.0.28 | 0.0.28 | GHSA-f745-w6jp-hpxx |
References
- GitHub Security Advisory (GHSA-f745-w6jp-hpxx) vendor-advisory
- VulnCheck Advisory: picklescan - Undetected Remote Code Execution via torch.utils.collect_env.run third-party-advisory