PT-2025-31645 · Ms-Swift+1 · Ms-Swift+1

Anchor0221 · Published 2020-03-24 · Updated 2025-08-18 · CVE-2025-50460

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ms-swift version 3.3.0

Description A remote code execution (RCE) vulnerability exists due to unsafe deserialization in tests/run.py using yaml.load() from the PyYAML library (versions = 5.3.1). An attacker controlling the YAML configuration file passed to the --run config parameter can execute arbitrary code during deserialization, potentially leading to full system compromise. The vulnerability is triggered when a malicious YAML file is loaded, allowing the execution of arbitrary Python commands such as os.system().

Recommendations Upgrade PyYAML to version 5.4 or higher. Use yaml.safe load() instead of yaml.load() to mitigate the issue.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

CWE-20

Related Identifiers

CVE-2025-50460

GHSA-6757-JP84-GXFX

GHSA-FM6C-F59H-7MMG

PYSEC-2020-96

Affected Products

Pyyaml

Ms-Swift

References · 32

• 🔥 https://github.com/Anchor0221/CVE-2025-50460 · Exploit
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/K5HEPD7LEVDPCITY5IMDYWXUMX37VFMY · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/MMQXSZXNJT6ERABJZAAICI3DQSQLCP3D · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/WORRFHPQVAFKKXXWLSSW6XKUYLWM6CSH · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-50460 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50460 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/7PPAS6C4SZRDQLR7C22A5U3QOLXY33JX · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1747 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/ZBJA3SGNJKCAYPSHOHWY3KBCWNM5NYK2 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-96 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fm6c-f59h-7mmg · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6757-jp84-gxfx · Vendor Advisory
• https://github.com/modelscope/ms-swift/blob/main/tests/run.py#L420 · Note
• https://github.com/modelscope/ms-swift · Note
• https://github.com/modelscope/ms-swift/commit/b3418ed9b050dc079553c275c5ed14cfb2b66cf7 · Note