PickleScan 0

Cybersecuritynews •Abinaya • December 4, 2025

Multiple critical zero‑day vulnerabilities in PickleScan, a popular open‑source tool used to scan machine learning models for malicious code. PickleScan is widely used in the AI world, including by Hugging Face, to check PyTorch models saved with Python’s pickle format. Pickle is flexible but dangerous, because loading a pickle file can run arbitrary Python code. That means a model […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Zero-Day Vulnerabilities Found in PickleScan Tool Multiple critical zero-day vulnerabilities have been identified in PickleScan, an open-source tool used for scanning machine learning models for malicious code. This tool is widely utilized in the AI community, including by Hugging Face, to evaluate PyTorch models saved in Python's pickle format, which can execute arbitrary Python code when loaded. 3 sources 47

Extracted Entities

PickleScan 0

The full story

Extracted Entities

Attack Types (1)

Platforms (1)

Tools (2)