picklescan before 1.0.3 contains a scanning bypass vulnerability in the scan_pytorch function that allows attackers to embed malicious magic numbers via dynamic eval using the _...
Date: 2026-06
Attack vector: rce
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2026-53875
CWE: CWE-95

picklescan before 1.0.3 contains a scanning bypass vulnerability in the scan_pytorch function that allows attackers to embed malicious magic numbers via dynamic eval using the __reduce__ trick. Attackers can craft malicious PyTorch payloads that evade picklescan detection while remaining executable, enabling arbitrary code execution when loaded with torch.load().


Mitigations:

Architectural layers (MAESTRO):