High 7.1Published Jun 17, 2026

CVE-2026-53875picklescan - Scanning Bypass via Dynamic Eval in scan_pytorch

Updated under an hour ago (Oct 27, 2026, 11:40 AM ET)

Does this affect you?

It affects picklescan. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for picklescan

Exploited in the last 30 days

picklescan before 1.0.3 contains a scanning bypass vulnerability in the scan_pytorch function that allows attackers to embed malicious magic numbers via dynamic eval using the __reduce__ trick. Attackers can craft malicious PyTorch payloads that evade picklescan detection while remaining executable, enabling arbitrary code execution when loaded with torch.load().

CVSS: 7.1 HIGH (v4.0, CNA)CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Weakness (CWE): CWE-95
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulnCheck
NVD analysis: Deferred
Record last updated: Jun 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

picklescan picklescan picklescan:picklescan (from the name)	before 1.0.3; 1.0.3 not affected	CNA record

References

References

https://github.com/mmaitre314/picklescan/security/advisories/GHSA-97f8-7cmv-76j2	vendor-advisory
https://github.com/mmaitre314/picklescan/commit/2a8383cfeb4158567f9770d86597300c9e508d0f	patch
https://github.com/mmaitre314/picklescan/commit/134179474539648ba7dee1317959529fbd0e7f89	patch
https://www.vulncheck.com/advisories/picklescan-scanning-bypass-via-dynamic-eval-in-scan-pytorch	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.