PT-2026-5985 · Boltz+1 · Boltz+1

Published 2026-02-03 · Updated 2026-02-11 · CVE-2025-70560

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Boltz version 2.0.0

Description The software contains an insecure deserialization issue in its molecule loading functionality. It utilizes Python pickle to deserialize molecule data files without proper validation. An attacker capable of placing a malicious pickle file in a directory processed by the application can achieve arbitrary code execution when the file is loaded. The application uses the pickle module to deserialize data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-70560

GHSA-FJM6-8XP2-4FWC

Affected Products

Boltz

Python Pickle

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-70560 · Security Note
• https://osv.dev/vulnerability/GHSA-fjm6-8xp2-4fwc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-70560 · Vendor Advisory
• https://github.com/jwohlwend/boltz/issues/600 · Note
• https://github.com/jwohlwend/boltz · Note
• https://github.com/jwohlwend/boltz/blob/cb04aeccdd480fd4db707f0bbafde538397fa2ac/src/boltz/data/mol.py#L80 · Note
• https://github.com/advisories/GHSA-fjm6-8xp2-4fwc · Note
• https://t.me/CVEtracker/43622 · Telegram Post
• https://t.me/cveNotify/151711 · Telegram Post
• https://twitter.com/TheHackerWire/status/2019092730161639543 · Twitter Post