CVE ID :CVE-2025-71356 Published : July 4, 2026, 1:23 a.m. | 1 hour, 50 minutes ago Description :picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression function calls in pickle files. Attackers can embed undetected code in...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2025-71356 - picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression

VERWANDTEARTIKEL

CVE-2026-57149

CVE-2026-55247

New “Bad Epoll” 0-Day Vulnerability Allows Root Access on Linux Servers and Android Devices

CVE-2025-71375 - picklescan - Undetected Remote Code Execution via _operator.methodcaller

CVE-2025-71380 - n8n - Arbitrary Command Execution via Execute Command Node

CVE-2025-71369 - picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers