PT-2025-30943 · Unknown+1 · Scikit-Learn+1
Io-No
·
Publicado
2025-07-25
·
Atualizado
2025-07-26
·
CVE-2025-54412
CVSS v4.0
8.7
Alta
| Vetor | AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
Vulnerability Summary
Name of the Vulnerable Software and Affected Versions
skops versions 0.11.0 and below
Description
skops is a Python library used for sharing and shipping scikit-learn based models. An inconsistency in the
OperatorFuncNode allows exploitation to hide the execution of untrusted operator methods. This can be leveraged in a code reuse attack to invoke seemingly safe functions and escalate to arbitrary code execution with minimal and misleading trusted types. The vulnerability stems from a discrepancy between what is returned by get untrusted types and checked during loading, and what is actually called during the construction of the OperatorFuncNode. Specifically, the module key is not used in the construction, allowing an attacker to forge a module name that, when combined with the class name, appears harmless but actually executes an operator.xxx method. A proof-of-concept demonstrates the ability to execute arbitrary code by combining OperatorFuncNode with the skops.io.loads function and a hidden model within a zip file.Recommendations
Versions prior to 0.12.0 are vulnerable.
Update to version 0.12.0 or later to resolve this issue.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Scikit-Learn
Skops