PT-2025-32333 · Skops · Skops

Io-No · Published 2025-08-07 · Updated 2025-08-13 · CVE-2025-54886

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions skops versions 0.12.0 and below skops versions prior to 0.13.0

Description The Card.get model function in skops allows for arbitrary code execution when loading models. This occurs because the function supports both joblib and skops for model loading. When loading non-.zip file formats, it silently falls back to joblib without warning, which allows arbitrary code execution during loading, bypassing security measures. This behavior is in contrast to skops, which enforces trusted type validation and raises errors for untrusted types.

Recommendations skops versions 0.12.0 and below: Upgrade to version 0.13.0 or later to resolve this issue.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-54886

GHSA-378X-6P4F-8JGM

Affected Products

Skops

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54886.json · Exploit
• 🔥 https://github.com/io-no/CVE-Reports/tree/main/CVE-2025-54886 · Exploit
• https://osv.dev/vulnerability/GHSA-378x-6p4f-8jgm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54886 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54886 · Vendor Advisory
• https://github.com/skops-dev/skops · Note
• https://github.com/skops-dev/skops/commit/29d61ea8a92f2bde6830e8f32cc72a1a87211cda · Note
• https://github.com/skops-dev/skops/security/advisories/GHSA-378x-6p4f-8jgm · Note
• https://t.me/CVEtracker/29484 · Telegram Post
• https://twitter.com/cracbot/status/1955585177763156193 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1953664809888567409 · Twitter Post