CVE ID :CVE-2025-71366 Published : July 4, 2026, 1:23 a.m. | 1 hour, 50 minutes ago Description :picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in pickle files, allowing attackers to bypass safety checks. Remote attackers can...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2025-71366 - picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile

VERWANDTEARTIKEL

CVE-2026-57149

CVE-2026-55247

New “Bad Epoll” 0-Day Vulnerability Allows Root Access on Linux Servers and Android Devices

CVE-2025-71375 - picklescan - Undetected Remote Code Execution via _operator.methodcaller

CVE-2025-71380 - n8n - Arbitrary Command Execution via Execute Command Node

CVE-2025-71369 - picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers

CVE-2025-71366 - picklescan - Arbitrary Code Execution via torch.utils.bottleneck.main.run_cprofile