PT-2025-31646 · Modelscope · Ms-Swift

Hao Fan + 1 · Published 2025-08-01 · Updated 2025-08-01 · CVE-2025-50472

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions modelscope/ms-swift versions through 2.6.1

Description The modelscope/ms-swift library is susceptible to arbitrary code execution through the deserialization of untrusted data. This occurs within the load model meta() function of the ModelFileSystemCache() class, utilizing pickle.load() on data originating from potentially untrusted sources. Attackers can exploit this by crafting a malicious serialized .mdl payload, leading to remote code execution (RCE). The malicious payload is a hidden file, making detection difficult. The normal training process remains unaffected after the execution of arbitrary code.

Recommendations versions prior to 2.7

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-50472

Affected Products

Ms-Swift

References · 7

• 🔥 https://github.com/xhjy2020/CVE-2025-50472 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-50472 · Security Note
• https://osv.dev/vulnerability/CVE-2025-50472 · Vendor Advisory
• https://github.com/modelscope/ms-swift/blob/ab38bff0387a86fd9f068246c326ee7b0d5ed139/swift/hub/utils/caching.py#L141 · Note
• https://twitter.com/mominaga1985/status/1951325736192585954 · Twitter Post
• https://t.me/CVEtracker/28950 · Telegram Post
• https://twitter.com/CVEnew/status/1951325418037850287 · Twitter Post