CVE-2025-1889

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-1889
picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not considered as part of the scope of picklescan, the file would pass security checks and appear to be safe, when it could instead prove to be problematic.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-655q-fx9r-782v Third Party Advisory Exploit
https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1889 Third Party Advisory Exploit Mitigation
Configurations

Configuration 1 (hide)

cpe:2.3:a:mmaitre314:picklescan:*:*:*:*:*:*:*:*
History

05 Mar 2025, 20:16

Type Values Removed Values Added
References () https://github.com/mmaitre314/picklescan/security/advisories/GHSA-655q-fx9r-782v - () https://github.com/mmaitre314/picklescan/security/advisories/GHSA-655q-fx9r-782v - Third Party Advisory, Exploit
References () https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1889 - () https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1889 - Third Party Advisory, Exploit, Mitigation
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE NVD-CWE-noinfo
Summary
  • (es) picklescan antes de la versión 0.0.22 solo considera los extensiones estándar de archivos pickle en el ámbito de su revisión de vulnerabilidades. Un atacante podría crear un modelo malicioso que utilice Pickle e incluir un archivo pickle malicioso con una extensión no estándar. Dado que la inclusión de un archivo pickle malicioso no se considera dentro del alcance de picklescan, el archivo pasaría las comprobaciones de seguridad y aparentaría ser seguro, cuando en realidad podría resultar problemático.
CPE cpe:2.3:a:mmaitre314:picklescan:*:*:*:*:*:*:*:*
First Time Mmaitre314 picklescan
Mmaitre314

04 Mar 2025, 12:15

Type Values Removed Values Added
CWE CWE-807 CWE-646
Summary (en) picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not considered as part of the scope of picklescan, the file would pass security checks and appear to be safe, when it could instead prove to be problematic. (en) picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not considered as part of the scope of picklescan, the file would pass security checks and appear to be safe, when it could instead prove to be problematic.

03 Mar 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-03 19:15

Updated : 2025-03-05 20:16

NVD link : CVE-2025-1889

Mitre link : CVE-2025-1889

CVE.ORG link : CVE-2025-1889

JSON object : View

Products Affected

mmaitre314

  • picklescan
CWE
CWE-646

Reliance on File Name or Extension of Externally-Supplied File

NVD-CWE-noinfo