Description
picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder.get function in reduce methods. Attackers can craft pickle files with embedded code that evades picklescan detection and executes arbitrary commands when loaded.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| picklescan | picklescan | < 0.0.28 | 0.0.28 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | picklescan | < 0.0.28 | 0.0.28 | GHSA-86cj-95qr-2p4f |
References
- GitHub Security Advisory (GHSA-86cj-95qr-2p4f) vendor-advisory
- VulnCheck Advisory: picklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.get third-party-advisory