PT-2026-50469 · Meta+1 · Pytorch+1

Zpbrent · CVE-2026-53875 · Published 2026-02-18 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 1.0.3

Description A scanning bypass exists in the scan pytorch() function. The issue arises from a difference in how magic numbers are handled compared to PyTorch's implementation. While the software uses pickletools.genops(data) to identify magic numbers of INT or LONG types, PyTorch uses pickle module.load(). Attackers can exploit this by using the reduce method to embed malicious magic numbers via dynamic eval, making them undetectable to the scanner while remaining executable. This allows crafted PyTorch payloads to evade detection and achieve arbitrary code execution when loaded using torch.load().

Recommendations Update to version 1.0.3 or later. As a temporary workaround, restrict the use of the scan pytorch() function until the update is applied.

Exploit

Fix

Eval Injection

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-95

CWE-184

Related Identifiers

CVE-2026-53875

GHSA-97F8-7CMV-76J2

GHSA-CC5P-54X3-HCF8

PYSEC-2026-2873

Affected Products

Pytorch

Picklescan

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53875.json · Exploit
• 🔥 https://github.com/mmaitre314/picklescan/security/advisories/GHSA-97f8-7cmv-76j2 · Exploit
• https://github.com/mmaitre314/picklescan/commit/2a8383cfeb4158567f9770d86597300c9e508d0f · Patch
• https://github.com/mmaitre314/picklescan/commit/134179474539648ba7dee1317959529fbd0e7f89 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-53875 · Security Note
• https://osv.dev/vulnerability/GHSA-cc5p-54x3-hcf8 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-53875 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-97f8-7cmv-76j2 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2873 · Vendor Advisory
• https://github.com/mmaitre314/picklescan/commit/b9997634683a4f4bd0c7e3701e7ce7e90fe70e8c · Note
• https://github.com/mmaitre314/picklescan · Note
• https://github.com/advisories/GHSA-97f8-7cmv-76j2 · Note
• https://pypi.org/project/picklescan · Note
• https://t.me/cveNotify/170018 · Telegram Post
• https://vulncheck.com/advisories/picklescan-scanning-bypass-via-dynamic-eval-in-scan-pytorch · Note