CVE-2025-54413highCWE-351

CVE-2025-54413: fallo de gravedad alta en skops-dev skops

skops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load time

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear skops+ Monitorear skops

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.7epss 0.2%
skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain an inconsistency in MethodNode, which can be exploited to access unexpected object fields through dot notation. This can be used to achieve arbitrary code execution at load time. While this issue may seem similar to GHSA-m7f4-hrc6-fwg3, it is actually more severe, as it relies on fewer assumptions about trusted types. This is fixed in version 12.0.0.
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Productos afectados
skops-dev · skops
CVEs relacionadas — skops-dev skops

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-54886HIGHskops: Card.get_model does not block arbitrary code executionEPSS 0.2%CVE-2025-54412HIGHskops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods ExecutionEPSS 0.2%